setup-tanstack-router
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation suggests installing official reference skills from the TanStack ecosystem using the command
npx @tanstack/intent@latest install. - [COMMAND_EXECUTION]: The skill implements automated hooks (
tanstack-router-gen.shandtanstack-router-check.sh) that execute whenever route files are modified to maintain the project's route tree. - [REMOTE_CODE_EXECUTION]: The
npxcommand is used to download and execute code from the npm registry; this is targeted at a well-known and trusted technology service. - [COMMAND_EXECUTION]: The
tanstack-router-gen.shscript invokesbun run generate:routes, which triggers the project's local routing generation CLI. - [COMMAND_EXECUTION]: The linting hook uses standard system utilities such as
grepandcatto inspect code for prohibited patterns likereact-router-domimports or unsafewindow.locationusage.
Audit Metadata