tanstack-query-hooks
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill follows standard React and TanStack Query best practices for state management and data fetching. All dependencies mentioned, such as @tanstack/react-query, are well-known and legitimate libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface where user-provided hook specifications (e.g., entity name, parameters) are interpolated into generated code templates. However, the risk is negligible as it serves purely for developer-oriented code generation.
- Ingestion points: Hook specifications provided by the user in the prompt as described in Step 3 of SKILL.md.
- Boundary markers: Absent.
- Capability inventory: Generation of React/TypeScript code using templates in TEMPLATES.md.
- Sanitization: Absent.
Audit Metadata