db-core/live-queries

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill integrates the @tanstack/db package, which is an official library resource associated with the author 'tanstack'.
  • [SAFE]: The documentation outlines active security measures, specifically the UnsafeAliasPathError guard, which prevents prototype pollution by disallowing the use of reserved keys like __proto__, prototype, or constructor in alias paths.
  • [SAFE]: Functional variants such as fn.select, fn.where, and fn.having are provided as documented escape hatches for arbitrary JavaScript logic. These are standard library features intended for complex operations and are accompanied by warnings regarding their performance impact and lack of optimization compared to declarative operators.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 05:58 AM