The Agent Skills Directory

[SAFE]: The skill provides standard developer guidance for the rivetkit library, which is the official client for the Rivet platform.
[CREDENTIALS_UNSAFE]: The skill correctly uses placeholders like pk_... and jwt-token-here for API keys and authentication tokens, preventing the exposure of actual secrets.
[INDIRECT_PROMPT_INJECTION]: The skill explicitly warns against key injection attacks when identifying actors, recommending the use of arrays over string interpolation for user-provided data. This demonstrates a security-conscious approach to handling untrusted input.
[EXTERNAL_DOWNLOADS]: The skill references standard package management workflows, such as installing the rivetkit package from the official NPM registry and adding related skills via npx from the rivet-dev organization.

rivetkit-client-javascript