tanstack-router
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze and generate routing logic, authentication guards, and data loading patterns based on user-provided codebases and task descriptions, which inherently creates an attack surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through user-supplied requirements, bug reports, or existing source code snippets during the guidance workflow.
- Boundary markers: The skill does not provide specific instructions for using delimiters or boundary markers to differentiate between the skill's instructions and untrusted user data.
- Capability inventory: The agent has the capability to generate sensitive security logic such as auth-based redirects (
beforeLoad), RBAC patterns, and server-side functions (createServerFn). - Sanitization: There are no specified sanitization or validation rules for user input before it is interpreted by the agent to generate code suggestions.
Audit Metadata