auth-and-guards
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill proactively addresses common security pitfalls by including a 'CRITICAL' warning that client-side route guards do not protect server functions (RPC endpoints). It correctly recommends using server-side middleware for data protection.
- [SAFE]: The provided code examples include a 'sanitizeRedirect' function designed to prevent Open Redirect vulnerabilities by validating that destination URLs are relative and do not use malicious protocols.
- [SAFE]: The skill identifies and provides remediation for 'flash of protected content' issues by enforcing authentication checks in the 'beforeLoad' hook rather than during the component render cycle.
- [SAFE]: The instructions correctly use the 'isRedirect' helper to ensure that intentional authentication redirects are not swallowed by catch blocks, which is essential for the correct functioning of the security layer.
- [SAFE]: All referenced Node.js packages and external documentation sources belong to the TanStack organization, which is the verified author of the skill.
Audit Metadata