tanstack-router

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill configures a PostToolUse hook to automatically execute bun run generate:routes (aliased to tsr generate) whenever route-related files are edited or written. This is a standard automation for the TanStack Router ecosystem to keep the route tree synchronized.
  • [INDIRECT_PROMPT_INJECTION]: The tanstack-router-check.sh script ingests the content of files the agent writes to perform static analysis and enforce coding standards.
  • Ingestion points: Reads modified .ts and .tsx files via shell commands.
  • Boundary markers: None (standard for linting scripts).
  • Capability inventory: Can issue blocks or warnings to the agent and trigger local route generation via bun.
  • Sanitization: Uses regex and awk for pattern matching without executing the ingested file content directly.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 02:01 AM
Security Audit — agent-trust-hub — tanstack-router