tanstack-table

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the @tanstack/react-table and @tanstack/match-sorter-utils packages via NPM. These are official, well-known libraries maintained by the TanStack organization and are standard for React development.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve the agent creating code to process and render external data sets. While this creates a data ingestion surface, the provided implementation patterns utilize standard React JSX, which automatically escapes content to prevent cross-site scripting (XSS).
  • Ingestion points: The data property passed to the useReactTable hook in SKILL.md and rules/table-setup.md.
  • Boundary markers: Implicitly handled by React component architecture and TypeScript interfaces defined in the examples.
  • Capability inventory: The skill is limited to UI rendering and does not include any dangerous capabilities such as direct shell execution, network exfiltration scripts, or file system modifications.
  • Sanitization: Relies on React's default security model for rendering values in the DOM.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 11:33 AM