setup-tanstack-router

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation suggests installing official reference skills from the TanStack ecosystem using the command npx @tanstack/intent@latest install.
  • [COMMAND_EXECUTION]: The skill implements automated hooks (tanstack-router-gen.sh and tanstack-router-check.sh) that execute whenever route files are modified to maintain the project's route tree.
  • [REMOTE_CODE_EXECUTION]: The npx command is used to download and execute code from the npm registry; this is targeted at a well-known and trusted technology service.
  • [COMMAND_EXECUTION]: The tanstack-router-gen.sh script invokes bun run generate:routes, which triggers the project's local routing generation CLI.
  • [COMMAND_EXECUTION]: The linting hook uses standard system utilities such as grep and cat to inspect code for prohibited patterns like react-router-dom imports or unsafe window.location usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 05:07 PM
Security Audit — agent-trust-hub — setup-tanstack-router