react-router-v7
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes handling user-provided data from URL parameters and forms, which is standard for web routing. This represents a potential vulnerability surface if implementations do not include proper sanitization.
- Ingestion points: Ingests data through request.formData() and URL params as shown in ACTIONS.md and LOADERS.md.
- Boundary markers: Not explicitly defined within the code snippets.
- Capability inventory: No dangerous host-level capabilities are defined.
- Sanitization: Includes basic examples of data validation for emails and password length.
Audit Metadata