react-router-data-mode

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is entirely instructional, providing patterns for routing, data loading, and form handling using the standard react-router library. All external references point to the official documentation at reactrouter.com.
  • [INDIRECT_PROMPT_INJECTION]: While the patterns demonstrate how to handle untrusted user input (URL parameters and form data), this is the standard intended functionality of the library. The documentation includes examples of validation and error handling.
  • Ingestion points: Route loader and action functions receive untrusted data through params and request objects (as seen in references/data-loading.md and references/actions.md).
  • Boundary markers: Not explicitly defined in snippets; relies on standard React/JSX security defaults.
  • Capability inventory: Examples include network requests (fetch), redirection, and hypothetical database mutations.
  • Sanitization: Basic validation patterns are shown for email and password inputs in references/actions.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 05:25 AM
Security Audit — agent-trust-hub — react-router-data-mode