query-docs-library-metadata

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes @tanstack/cli commands via npx to query library metadata, search documentation, and list project add-ons.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to fetch and execute the @tanstack/cli package from the npm registry, which is a resource managed by the skill's author.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation content and search results which could theoretically contain malicious instructions.
  • Ingestion points: Data retrieved from documentation pages and search snippets via the doc and search-docs commands.
  • Boundary markers: None explicitly defined in the prompt templates.
  • Capability inventory: Shell command execution via npx and potential filesystem interactions for project scaffolding.
  • Sanitization: The skill relies on machine-readable JSON output provided by the CLI tool to normalize data structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:22 PM