trpc
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes security-hardened patterns for tRPC v11, addressing critical areas like credential management and secure session handling.
- [SAFE]: It provides explicit instructions on preventing sensitive data exposure, such as disabling stack traces in production edge runtimes and ensuring authenticated tokens are not serialized into URL query strings for subscriptions.
- [SAFE]: The documentation identifies and mitigates advanced security risks like CDN cache poisoning in batched HTTP requests by providing logic to gate cache headers based on authentication status and procedure type.
- [SAFE]: Instructions correctly prioritize input validation by advising that middleware which side-effects on payloads should always be declared after input parsers.
- [SAFE]: External references are limited to official documentation for tRPC and TanStack Query, which are trusted, well-known technical resources.
Audit Metadata