tanstack-router
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of educational documentation and code examples for TanStack Router. No malicious patterns, prompt injections, or unauthorized network operations were detected across the 37 analyzed files.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Analysis of all scripts and documentation confirmed no sensitive file paths (like .ssh or .aws) or hardcoded credentials. Network examples in the code snippets use standard local or placeholder API endpoints (e.g., /api/posts, fetchPost) which are legitimate for architectural guidance.
- [OBFUSCATION]: A code example in
rules/search-custom-serializer.mddemonstrates Base64 encoding (btoa/atob) for URL search parameters. This is documented as a technique for compacting complex state in URLs. The example Base64 string provided in the text decodes to a benign JSON object ({"category":"electronics"}) and does not contain hidden commands. - [REMOTE_CODE_EXECUTION]: No remote script downloads (curl|bash) or dynamic code execution patterns were found. All referenced dependencies, such as
@tanstack/react-router,zod, andvalibot, are standard, well-known libraries within the React ecosystem. - [PROMPT_INJECTION]: The instructional text was reviewed for override or bypass markers. The language used is strictly educational and consistent with software development best practices without attempting to manipulate agent behavior or safety filters.
Audit Metadata