tanstack-ai-core-tool-calling
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents fetching tool configurations and connecting to MCP servers via HTTP/SSE. Examples include well-known services like GitHub and Linear (e.g.,
https://mcp.github.com/mcp,https://mcp.linear.app/mcp). - [COMMAND_EXECUTION]: The documentation includes patterns for using
stdioTransportvia Node.jschild_process, specifically demonstrating the use ofnpxto launch MCP servers locally. - [REMOTE_CODE_EXECUTION]: The skill explains how to integrate provider-managed sandbox environments, such as Anthropic's
code_executiontool and OpenAI'sshelltool, which allow the model to execute code within secure, remote sandboxes. - [DATA_EXFILTRATION]: Provides patterns for tools that search databases (
db.products.search) and retrieve user information (db.users.findUnique). These are presented as standard functional examples for tool-calling capabilities. - [SAFE]: The skill mandates the use of Zod schemas (
inputSchema,outputSchema) for all tool definitions, which provides strong runtime validation and type safety for data entering or leaving the agent's context.
Audit Metadata