tanstack-highlight
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill is composed of documentation, configuration metadata, and code examples for syntax highlighting.
- [DATA_EXPOSURE]: Documentation includes examples of using the
navigator.clipboardAPI to implement 'Copy' buttons in user interfaces, which is a standard functional requirement for code documentation and does not represent a sensitive data leak. - [DYNAMIC_EXECUTION]: The guides detail the usage of
dangerouslySetInnerHTMLin React and Octane components for rendering highlighted source. The skill provides proactive security guidance, warning developers that while the highlighter escapes the code source, the resulting HTML insertion property does not sanitize unrelated HTML and should be used carefully within application-owned components.
Audit Metadata