tanstack-router

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for processing untrusted data via URL path and search parameters, though it mitigates this risk with built-in validation.
  • Ingestion points: URL data is ingested in src/routes/users/index.tsx (search params) and src/routes/users/$userId/route.tsx (path params).
  • Boundary markers: The implementation uses structured Zod schemas to define expected data boundaries.
  • Capability inventory: Route loaders perform fetch requests using values derived from these parameters.
  • Sanitization: Employs zod for type-safe validation and casting (validateSearch), preventing malicious or malformed input from propagating to backend API calls.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of legitimate, widely-used development dependencies.
  • Packages: Installations include @tanstack/react-router, @tanstack/router-plugin, and zod from official registries.
  • Sources: All packages and references are associated with well-known technology organizations (TanStack).
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 06:57 PM