add-addons-existing-app
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official
@tanstack/clitool vianpxto manage project integrations ('clerk', 'drizzle', 'tanstack-query', 'prisma'). These commands are standard for the tool's intended purpose and are executed within the context of a project scaffolded by the vendor. - [EXTERNAL_DOWNLOADS]: References the official TanStack GitHub repository (github.com/TanStack/cli) for historical issue context and documentation. This is a trusted vendor resource.
- [METADATA_POISONING]: The skill instructions and metadata are consistent with its stated purpose of managing TanStack CLI add-ons. The labels such as 'CRITICAL' and 'HIGH' within the text refer to the functional impact of user mistakes during CLI usage, not security vulnerabilities.
Audit Metadata