nextjs-tanstack-query
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard technical instructions for integrating TanStack Query with Next.js 16. It follows established best practices such as creating a new QueryClient per request and using HydrationBoundaries for SSR data transfer.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install official and well-known packages from the @tanstack organization (@tanstack/react-query and @tanstack/react-query-devtools) using the bun package manager.
- [INDIRECT_PROMPT_INJECTION]: The skill defines components that ingest data from external API endpoints (e.g., /api/users). While this represents a standard data ingestion surface, the implementation uses standard React patterns which include default protection against many common injection types like XSS. * Ingestion points: references/query-patterns.md (fetch calls in useQuery and useMutation hooks); * Boundary markers: None explicitly defined in the provided code examples; * Capability inventory: Network access (fetch), package installation (bun add); * Sanitization: None explicitly defined beyond standard React rendering behavior.
Audit Metadata