tanstack-db-core-custom-adapter
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@tanstack/dbpackage and references source materials from the official TanStack GitHub repositories for database implementation and synchronization logic.- [DATA_EXFILTRATION]: The code examples demonstrate the use of thefetchAPI to synchronize local database changes with a remote endpoint. This includes transmitting record data via POST, PATCH, and DELETE methods as part of the intended adapter functionality.- [PROMPT_INJECTION]: The skill implements patterns for ingesting untrusted data from external sources such as APIs and WebSockets, which presents a surface for indirect prompt injection. - Ingestion points: Data is ingested through
fetch(config.endpoint)andmyWebSocket.subscribewithin the synchronization logic inSKILL.md. - Boundary markers: The instructions do not provide specific delimiters or ignore-instruction warnings for the data being synced into the database.
- Capability inventory: The skill has the capability to perform network requests (
fetch) and modify local application state (write,commit). - Sanitization: The implementation patterns do not include explicit sanitization or validation of the data retrieved from external services before processing.
Audit Metadata