tanstack-start

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation resource for the TanStack Start framework. It does not contain executable code, hidden instructions, or obfuscated content.
  • [DATA_EXPOSURE]: The skill provides explicit security warnings and architectural patterns to prevent the exposure of server-side secrets (such as API keys and database credentials) to the client-side bundle. It documents the use of execution boundaries like createServerOnlyFn and the VITE_ environment variable prefixing system to ensure sensitive data remains protected.
  • [PROMPT_INJECTION]: No evidence of prompt injection, role-play overrides, or safety filter bypass attempts were detected in the instructions or metadata.
  • [COMMAND_EXECUTION]: Shell command examples are limited to standard development and deployment workflows, such as project builds and Cloudflare Worker deployments, using well-known tooling like npm, vite, and wrangler.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:51 AM
Security Audit — agent-trust-hub — tanstack-start