react-router-data-mode
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely instructional, providing patterns for routing, data loading, and form handling using the standard
react-routerlibrary. All external references point to the official documentation at reactrouter.com. - [INDIRECT_PROMPT_INJECTION]: While the patterns demonstrate how to handle untrusted user input (URL parameters and form data), this is the standard intended functionality of the library. The documentation includes examples of validation and error handling.
- Ingestion points: Route
loaderandactionfunctions receive untrusted data throughparamsandrequestobjects (as seen inreferences/data-loading.mdandreferences/actions.md). - Boundary markers: Not explicitly defined in snippets; relies on standard React/JSX security defaults.
- Capability inventory: Examples include network requests (
fetch), redirection, and hypothetical database mutations. - Sanitization: Basic validation patterns are shown for email and password inputs in
references/actions.md.
Audit Metadata