choose-ecosystem-integrations

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to perform discovery and scaffolding operations using the @tanstack/cli via npx. These commands are used to query ecosystem metadata and generate project structures.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the TanStack CLI from the public npm registry. This is a standard method for accessing official vendor-supplied development tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves parsing JSON output from CLI tools to map ecosystem partners to add-on IDs. The data originates from the official TanStack ecosystem, and the risk of malicious instruction injection via these structured metadata sources is minimal.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:05 PM