grey-haven-tanstack-patterns
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Prompt Injection] (SAFE): No instructions attempting to override agent behavior, extract system prompts, or bypass safety filters were found. The 'Critical Reminders' section contains standard technical constraints rather than adversarial instructions.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, sensitive file path access, or exfiltration logic identified. Network access is restricted to the 'WebFetch' tool without any predefined malicious destinations.
- [Obfuscation] (SAFE): Content is clear and readable. No Base64, zero-width characters, or homoglyphs were detected.
- [Unverifiable Dependencies] (SAFE): No external script downloads or package installations (e.g., npm, pip) are performed by the skill itself.
- [Privilege Escalation] (SAFE): No use of sudo or modification of system permissions. While 'Bash' is an allowed tool, there are no commands within the skill that attempt to escalate privileges.
- [Indirect Prompt Injection] (LOW): As a coding pattern skill, it is intended to influence the agent's output when the agent processes user-provided code. While the skill has 'Write' and 'Bash' capabilities, it does not define logic for processing untrusted external inputs in an unsafe manner.
Audit Metadata