tanstack-query-svelte-implementation
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for ingesting and rendering data from external APIs via
createQueryandcreateMutation(as seen inreferences/01-overview.mdandreferences/04-createquery.md). Ingesting untrusted data from third-party endpoints is a potential surface for indirect prompt injection. However, the skill includes explicit security guidance inreferences/07-usemutationstate.md, advising users to sanitize content rendered through{@html}, implement Content Security Policies (CSP), and avoid logging sensitive API data, which are standard best practices for mitigating these risks.
Audit Metadata