tanstack-vue-virtual-skilld
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation, examples, and changelogs from the TanStack organization (tanstack.com and github.com/TanStack). It also points to type definitions hosted on the well-known unpkg.com CDN. These are standard and trusted resources for frontend development.
- [COMMAND_EXECUTION]: Provides instructions for installing the library via standard package managers using 'npm install @tanstack/vue-virtual'. No suspicious or unauthorized command patterns are present.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for UI components that render dynamic data (e.g., chat messages or list items). While this defines a data ingestion surface, the logic is limited to UI virtualization. The recipes use standard Vue templating which includes automatic HTML escaping to prevent common injection attacks like XSS.
- [DYNAMIC_EXECUTION]: The skill documents the use of the Virtualizer class to manage application state and provides patterns for scroll restoration using JSON.parse on session-stored data. These are standard features for a UI library and do not involve the execution of arbitrary or untrusted code.
- [SAFE]: No obfuscation, credential exposure, unauthorized network operations, or persistence mechanisms were identified. The content is strictly technical and aligns with the stated purpose of assisting with the @tanstack/vue-virtual library.
Audit Metadata