skills/lukasa1993/tanstack-skills-extracted/tanstack-start-client-core-start-core-server-routes/Gen Agent Trust Hub
tanstack-start-client-core-start-core-server-routes
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational documentation and code snippets for the TanStack Start framework. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [PROMPT_INJECTION]: The use of terms like 'CRITICAL' and 'HIGH' in the 'Common Mistakes' section are for developer education regarding security best practices (e.g., protecting server routes and validating input) and do not represent attempts to override agent behavior or bypass safety filters.
- [DATA_EXFILTRATION]: Code examples demonstrate standard web development practices, such as fetching data from a local database or sending JSON responses via relative API paths. No hardcoded credentials or unauthorized external network calls were found.
- [INDIRECT_PROMPT_INJECTION]: While the documentation describes creating API endpoints that ingest untrusted data (via
request.json()), it explicitly mitigates this risk by instructing developers to implement middleware for authentication and to perform schema validation on all inputs.
Audit Metadata