tanstack-start-client-core-start-core-execution-model

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical guide for developers using TanStack Start. It provides instructions on how to correctly use environment boundaries (createServerFn, createClientOnlyFn, etc.) to ensure code runs in the intended environment.
  • [SAFE]: The skill includes explicit security warnings regarding the risk of leaking sensitive environment variables to the client bundle. It correctly identifies dangerous patterns, such as using the VITE_ prefix for secrets or reading process.env at the module scope.
  • [SAFE]: Code examples containing placeholders for sensitive data (e.g., sk_live_xxx, JWT_SECRET) are used strictly for educational purposes to demonstrate improper configuration and are clearly labeled as incorrect practices.
  • [SAFE]: All external library references target the well-known @tanstack ecosystem, which is consistent with the stated purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 10:58 AM