tanstack-form

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of documentation and code examples for implementing frontend forms. All provided patterns follow standard software development practices.
  • [EXTERNAL_DOWNLOADS]: The skill references the @tanstack/react-form package, which is a widely recognized and well-known library for form management in the React ecosystem.
  • [SAFE]: The skill integrates with UI components and backend services from the @oakoss ecosystem (including @oakoss/ui, @oakoss/database, and @oakoss/auth), which are resources provided by the skill's author for its intended functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an architectural surface for ingesting user data through forms.
  • Ingestion points: Form input fields (TextField, Select, Checkbox, etc.) defined in SKILL.md and field-components.md.
  • Boundary markers: The instructions explicitly teach the use of Zod validation schemas to define data boundaries and reject invalid inputs.
  • Capability inventory: The skill includes patterns for database persistence (db.insert) and file uploads to storage providers, which are standard for form-based applications.
  • Sanitization: Input data is validated against strict schemas (e.g., z.email(), z.string().min(1)) within the onSubmit handlers before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 03:29 AM
Security Audit — agent-trust-hub — tanstack-form