tanstack-router
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for processing untrusted data via URL path and search parameters, though it mitigates this risk with built-in validation.
- Ingestion points: URL data is ingested in
src/routes/users/index.tsx(search params) andsrc/routes/users/$userId/route.tsx(path params). - Boundary markers: The implementation uses structured Zod schemas to define expected data boundaries.
- Capability inventory: Route loaders perform
fetchrequests using values derived from these parameters. - Sanitization: Employs
zodfor type-safe validation and casting (validateSearch), preventing malicious or malformed input from propagating to backend API calls. - [EXTERNAL_DOWNLOADS]: The skill references the installation of legitimate, widely-used development dependencies.
- Packages: Installations include
@tanstack/react-router,@tanstack/router-plugin, andzodfrom official registries. - Sources: All packages and references are associated with well-known technology organizations (TanStack).
Audit Metadata