rivetkit
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalyopenapi.json
LOWAnomalyLOW
openapi.json
No malicious code or supply-chain payload is present in this declarative fragment. The API specification exposes high-impact actor forwarding, state mutation, and action execution capabilities. Optional inspector authentication and unrestricted parameters warrant security review of the implementation, authorization, path validation, and production configuration. Findings are limited because the implementation is not provided.
Confidence: 98%Severity: 62%
Audit Metadata