skills/kursku/skills/trpc-fullstack/Gen Agent Trust Hub

trpc-fullstack

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install standard, industry-recognized libraries from the official npm registry, such as @trpc/server, @trpc/client, and @tanstack/react-query. It also references documentation from established sources like trpc.io and the official tRPC GitHub repository.
  • [COMMAND_EXECUTION]: Provides a standard installation command (npm install) for setting up the required development environment.
  • [PROMPT_INJECTION]: The skill documents an interface for handling untrusted user data via tRPC procedures. It addresses potential indirect injection risks by explicitly requiring the use of Zod schemas for input validation and implementing server-side authorization middleware to protect sensitive operations. This follows the principle of least privilege and secure data handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 12:24 PM
Security Audit — agent-trust-hub — trpc-fullstack