execution-model
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for developers, focusing on secure coding practices within the TanStack Start framework. It proactively warns against security risks such as the accidental exposure of environment variables to client-side bundles.
- [DATA_EXPOSURE]: The documentation correctly identifies risks associated with environment variable exposure (e.g., using the
VITE_prefix or accessingprocess.envat the module scope). It provides secure alternatives using server-only functions to protect sensitive data. The credentials mentioned in the examples (e.g.,sk_live_xxx) are standard placeholders used for instructional purposes and do not represent actual secrets. - [EXTERNAL_DOWNLOADS]: The skill references official
@tanstackecosystem packages. These dependencies are consistent with the skill's stated purpose and author, following established patterns for modern web development frameworks.
Audit Metadata