tanstack-markdown-production-pipelines

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a documentation and best-practices guide for the @tanstack/markdown library. It focuses on identifying security risks such as the unsafe use of allowHtml and the injection of unescaped highlighter output, providing correct implementation patterns to mitigate these risks.
  • [EXTERNAL_DOWNLOADS]: The skill references the official @tanstack/markdown and @tanstack/highlight packages. These are recognized, well-known libraries from a reputable open-source organization, used for parsing and highlighting code in web applications.
  • [COMMAND_EXECUTION]: The instructions include references to standard project scripts such as pnpm run verify and pnpm run size. These are routine development commands used for testing, type-checking, and monitoring bundle sizes, presenting no security threat in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:37 AM