tanstack-router
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill configures a
PostToolUsehook to automatically executebun run generate:routes(aliased totsr generate) whenever route-related files are edited or written. This is a standard automation for the TanStack Router ecosystem to keep the route tree synchronized. - [INDIRECT_PROMPT_INJECTION]: The
tanstack-router-check.shscript ingests the content of files the agent writes to perform static analysis and enforce coding standards. - Ingestion points: Reads modified
.tsand.tsxfiles via shell commands. - Boundary markers: None (standard for linting scripts).
- Capability inventory: Can issue blocks or warnings to the agent and trigger local route generation via
bun. - Sanitization: Uses regex and
awkfor pattern matching without executing the ingested file content directly.
Audit Metadata