tanstack-db-skills-tanstack-db

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation reference for the TanStack DB ecosystem, focusing on reactive data patterns and state management. The provided examples follow standard development practices for client-side API interaction and data synchronization.
  • [EXTERNAL_DOWNLOADS]: The skill references official TanStack ecosystem packages (e.g., @tanstack/db, @tanstack/react-db). These are well-known, widely used libraries from a recognized organization.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting data from external APIs via fetch. It correctly identifies the need for schema validation using libraries like Zod or Valibot to ensure data integrity and security at the boundary.
  • Ingestion points: Data enters the client store through queryFn implementations (e.g., fetch('/api/todos') in SKILL.md).
  • Boundary markers: The skill documentation explicitly guides users toward the schemas/ directory for validation.
  • Capability inventory: No active code execution capabilities (like shell commands or file writes) are defined within the skill itself.
  • Sanitization: Recommends the use of StandardSchema-compliant libraries (Zod, Valibot) for data validation and transformation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 10:57 AM