with-tanstack-virtual

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and code examples from the official TanStack GitHub repository, which is a well-known and trusted source for this library.\n- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a component that processes and renders table data, creating a surface for potential indirect prompt injection if the source data is untrusted.\n
  • Ingestion points: Data is accessed via table.getRowModel().rows and rendered through table.FlexRender in SKILL.md.\n
  • Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore instructions embedded within the table data.\n
  • Capability inventory: The skill code is limited to React UI rendering; it does not contain capabilities for file system writes, network requests, or shell command execution.\n
  • Sanitization: The provided examples do not demonstrate explicit sanitization of the table cell content before rendering, which is typical for library usage documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 02:17 PM