rivetkit-client-react

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the @rivetkit/react package and rivetkit library, which are the official client-side SDKs for the Rivet actor platform.
  • [COMMAND_EXECUTION]: Provides standard developer commands for environment setup, including npm install for dependency management and npx skills add for extending skill capabilities.
  • [SAFE]: Includes explicit security guidance to use compound keys (arrays) instead of string interpolation for actor identifiers, mitigating potential key injection vulnerabilities.
  • [SAFE]: Utilizes clearly marked placeholders (e.g., pk_...) for sensitive endpoint parameters in code examples, preventing the accidental exposure of real credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 11:04 PM
Security Audit — agent-trust-hub — rivetkit-client-react