tanstack-start
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for the TanStack Start framework. It does not contain executable code, hidden instructions, or obfuscated content.
- [DATA_EXPOSURE]: The skill provides explicit security warnings and architectural patterns to prevent the exposure of server-side secrets (such as API keys and database credentials) to the client-side bundle. It documents the use of execution boundaries like
createServerOnlyFnand theVITE_environment variable prefixing system to ensure sensitive data remains protected. - [PROMPT_INJECTION]: No evidence of prompt injection, role-play overrides, or safety filter bypass attempts were detected in the instructions or metadata.
- [COMMAND_EXECUTION]: Shell command examples are limited to standard development and deployment workflows, such as project builds and Cloudflare Worker deployments, using well-known tooling like
npm,vite, andwrangler.
Audit Metadata