tanstack-query-svelte-review
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation and review framework for TanStack Query in Svelte applications. It provides detailed checklists for developers and reviewers to ensure correct implementation of query keys, mutations, and SSR.
- [SAFE]: Security is a core focus of the provided references. The skill includes specific advice on clearing the query cache during logout, preventing the inclusion of secrets or tokens in query keys, and implementing proper sanitization (e.g., using CSP and avoiding raw
{@html}interpolation) to mitigate XSS risks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted data in the form of pull request diffs and source code. Ingestion points: The skill instructions in SKILL.md direct the agent to 'Inspect the diff and surrounding code'. Boundary markers: There are no specific instructions for using delimiters or markers to separate untrusted code from instructions. Capability inventory: The skill consists purely of instructional documentation and does not possess sensitive capabilities like network access, file system modification, or command execution. Sanitization: The instructions do not specify sanitization or validation logic for the external code being reviewed.
Audit Metadata