tanstack-ai-migration

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches an official migration codemod from the TanStack GitHub repository (https://raw.githubusercontent.com/TanStack/ai/main/codemods/ag-ui-compliance/transform.ts). This script is used for automated code transformation during migration.
  • [COMMAND_EXECUTION]: The skill provides instructions to execute several commands for project setup and verification:
  • Uses npx @tanstack/intent@latest to load official TanStack AI skill components.
  • Uses node and npm to inspect the versioning of the installed @tanstack/ai package.
  • Uses npx jscodeshift to run transformation scripts against the local src/ directory.
  • [DYNAMIC_EXECUTION]: The skill executes remote TypeScript code via jscodeshift -t. The source URL for this code is the official repository of the skill author (TanStack), representing standard vendor-provided migration functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 11:20 AM
Security Audit — agent-trust-hub — tanstack-ai-migration