tanstack-router

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of educational documentation and code examples for TanStack Router. No malicious patterns, prompt injections, or unauthorized network operations were detected across the 37 analyzed files.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: Analysis of all scripts and documentation confirmed no sensitive file paths (like .ssh or .aws) or hardcoded credentials. Network examples in the code snippets use standard local or placeholder API endpoints (e.g., /api/posts, fetchPost) which are legitimate for architectural guidance.
  • [OBFUSCATION]: A code example in rules/search-custom-serializer.md demonstrates Base64 encoding (btoa/atob) for URL search parameters. This is documented as a technique for compacting complex state in URLs. The example Base64 string provided in the text decodes to a benign JSON object ({"category":"electronics"}) and does not contain hidden commands.
  • [REMOTE_CODE_EXECUTION]: No remote script downloads (curl|bash) or dynamic code execution patterns were found. All referenced dependencies, such as @tanstack/react-router, zod, and valibot, are standard, well-known libraries within the React ecosystem.
  • [PROMPT_INJECTION]: The instructional text was reviewed for override or bypass markers. The language used is strictly educational and consistent with software development best practices without attempting to manipulate agent behavior or safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 08:06 AM