solid-tanstack-start
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill promotes secure coding practices by enforcing input validation with Zod and isolating sensitive server-side logic (database access, secrets) from the client bundle using server-only functions.
- [COMMAND_EXECUTION]: The documentation mentions running
npx jscpdfor code duplication analysis, which is a benign utility for improving code quality during development. - [INDIRECT_PROMPT_INJECTION]: The skill defines clear ingestion points for untrusted data via route loaders and server functions. It provides robust mitigation by mandating the use of Zod for input validation and maintaining strict boundary markers by separating data models from view-specific interfaces.
Audit Metadata