trpc-fullstack
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install standard, industry-recognized libraries from the official npm registry, such as
@trpc/server,@trpc/client, and@tanstack/react-query. It also references documentation from established sources liketrpc.ioand the official tRPC GitHub repository. - [COMMAND_EXECUTION]: Provides a standard installation command (
npm install) for setting up the required development environment. - [PROMPT_INJECTION]: The skill documents an interface for handling untrusted user data via tRPC procedures. It addresses potential indirect injection risks by explicitly requiring the use of Zod schemas for input validation and implementing server-side authorization middleware to protect sensitive operations. This follows the principle of least privilege and secure data handling.
Audit Metadata