tanstack-table
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@tanstack/react-tableand@tanstack/match-sorter-utilspackages via NPM. These are official, well-known libraries maintained by the TanStack organization and are standard for React development. - [INDIRECT_PROMPT_INJECTION]: The skill instructions involve the agent creating code to process and render external data sets. While this creates a data ingestion surface, the provided implementation patterns utilize standard React JSX, which automatically escapes content to prevent cross-site scripting (XSS).
- Ingestion points: The
dataproperty passed to theuseReactTablehook inSKILL.mdandrules/table-setup.md. - Boundary markers: Implicitly handled by React component architecture and TypeScript interfaces defined in the examples.
- Capability inventory: The skill is limited to UI rendering and does not include any dangerous capabilities such as direct shell execution, network exfiltration scripts, or file system modifications.
- Sanitization: Relies on React's default security model for rendering values in the DOM.
Audit Metadata