db-core/live-queries
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates the
@tanstack/dbpackage, which is an official library resource associated with the author 'tanstack'. - [SAFE]: The documentation outlines active security measures, specifically the
UnsafeAliasPathErrorguard, which prevents prototype pollution by disallowing the use of reserved keys like__proto__,prototype, orconstructorin alias paths. - [SAFE]: Functional variants such as
fn.select,fn.where, andfn.havingare provided as documented escape hatches for arbitrary JavaScript logic. These are standard library features intended for complex operations and are accompanied by warnings regarding their performance impact and lack of optimization compared to declarative operators.
Audit Metadata