tanstack-router

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install official and well-known Node.js packages (@tanstack/react-router, @tanstack/router-plugin, @tanstack/router-devtools) via pnpm. These are standard dependencies for the library described.
  • [DATA_EXPOSURE]: No hardcoded secrets, credentials, or sensitive file path access (such as .env or .ssh) were identified. The data fetching examples use local placeholder functions (fetchUser).
  • [PROMPT_INJECTION]: The instructions do not contain attempts to override system prompts, bypass safety filters, or use adversarial role-play techniques.
  • [OBFUSCATION]: No obfuscated content, such as hidden Base64 strings, zero-width characters, or homoglyph attacks, was found in the documentation or code snippets.
  • [COMMAND_EXECUTION]: The skill uses standard build-tooling plugins (TanStackRouterVite) and command-line instructions for package management that are typical for modern web development workflows.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates best practices for handling untrusted input by providing examples of schema-based validation using zod for search parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 08:18 PM
Security Audit — agent-trust-hub — tanstack-router