tanstack-router
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install official and well-known Node.js packages (
@tanstack/react-router,@tanstack/router-plugin,@tanstack/router-devtools) viapnpm. These are standard dependencies for the library described. - [DATA_EXPOSURE]: No hardcoded secrets, credentials, or sensitive file path access (such as
.envor.ssh) were identified. The data fetching examples use local placeholder functions (fetchUser). - [PROMPT_INJECTION]: The instructions do not contain attempts to override system prompts, bypass safety filters, or use adversarial role-play techniques.
- [OBFUSCATION]: No obfuscated content, such as hidden Base64 strings, zero-width characters, or homoglyph attacks, was found in the documentation or code snippets.
- [COMMAND_EXECUTION]: The skill uses standard build-tooling plugins (
TanStackRouterVite) and command-line instructions for package management that are typical for modern web development workflows. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates best practices for handling untrusted input by providing examples of schema-based validation using
zodfor search parameters.
Audit Metadata