tanstack-start-client-core-start-core-server-routes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill documents TanStack “server routes” that directly handle incoming HTTP requests by reading route handler inputs like request.json()/request.text(), so an outsider can POST free text into a route body that the runtime ingests.