tanstack-query
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official packages (@tanstack/react-query and @tanstack/react-query-devtools) from the TanStack organization, which is a recognized and trusted provider of web development utilities.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for fetching data from external API endpoints (e.g., /api/todos), which constitutes an ingestion surface for untrusted data as part of its primary state management function.
- Ingestion points: Data retrieved through
fetchoperations within documentedqueryFnexamples. - Boundary markers: While not explicitly shown in code snippets, the documentation promotes best practices for structured data management.
- Capability inventory: Examples involve network operations (fetch) for data retrieval and optimistic updates.
- Sanitization: The skill demonstrates data selection using the
selectoption, though it does not focus on explicit input sanitization which should be handled by the implementation logic.
Audit Metadata