skills/tanstack/router/start-core/Gen Agent Trust Hub

start-core

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install official packages from the TanStack ecosystem (@tanstack/react-start, @tanstack/react-router) along with standard industry tools like Vite and TypeScript via npm. These are well-known, legitimate resources from a recognized vendor.
  • [PROMPT_INJECTION]: While the skill uses strong language like 'CRITICAL' and 'IMPORTANT', these markers are used exclusively to emphasize framework-specific technical requirements (e.g., Vite plugin ordering and server-side logic isolation) rather than attempting to override the agent's safety protocols or core instructions.
  • [DATA_EXPOSURE]: The skill promotes secure development practices by explicitly instructing developers to place sensitive logic, such as database access and secrets, behind createServerFn to ensure they remain on the server and are not leaked to the client-side bundle.
  • [COMMAND_EXECUTION]: The provided bash commands for dependency installation are standard development workflows and do not contain hidden or malicious flags.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:02 PM