server-functions
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and serves as documentation for TanStack Start server functions. It does not contain any executable malicious payloads or obfuscated code.
- [SAFE]: Includes explicit security guidance for the developer (and agent) regarding authentication, cross-tenant data leaks (Cache-Control), and the isomorphic nature of loaders. It correctly differentiates between UI route guards and handler-level data security.
- [SAFE]: Recommends robust input validation practices using Zod and manual validators for data arriving at server function endpoints.
- [SAFE]: All referenced libraries (@tanstack/react-start, @tanstack/react-router, zod) are well-known, industry-standard packages from trusted or reputable sources.
Audit Metadata