trpc-api
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard, industry-recognized libraries such as @trpc/server, @tanstack/react-query, and zod, which are essential for its functionality and sourced from the official NPM registry.
- [PROMPT_INJECTION]: The skill involves data ingestion from external clients via tRPC procedures, which constitutes an indirect prompt injection surface.
- Ingestion points: Input arguments in the
userRouterprocedures defined insrc/server/routers/user.ts(e.g.,getById,create,update). - Boundary markers: Strong boundary enforcement using tRPC's
.input()method paired with Zod schemas. - Capability inventory: Performing CRUD operations on a database through the Prisma ORM as seen in
src/server/routers/user.ts. - Sanitization: Strict validation and sanitization of incoming data using Zod schema types (e.g., UUID, email, and string length constraints).
Audit Metadata