tanstack-intent
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
@tanstack/intentpackage from the official NPM registry. This resource belongs to a well-known and trusted organization in the web development ecosystem. - [REMOTE_CODE_EXECUTION]: The skill uses
bunxto execute remote code from the@tanstack/intentpackage at runtime, which is the intended behavior for loading documentation and guidance. - [COMMAND_EXECUTION]: Instructs the agent to execute shell commands for listing, loading, and installing package guidance and repository hooks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local project environment which could influence subsequent command parameters.
- Ingestion points: The agent reads the local
package.jsonfile and the JSON output of theintent listcommand as described inSKILL.md. - Boundary markers: No specific delimiters or boundary instructions are used when processing these data sources.
- Capability inventory: The skill performs shell command execution using
bunxin bothSKILL.mdandSETUP.md. - Sanitization: No explicit sanitization logic for ingested package names or IDs is provided within the skill instructions.
Audit Metadata