rivetkit-client-react
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for the @rivetkit/react library, which is a legitimate tool for building React applications with Rivet Actors.\n- [CREDENTIALS_SAFE]: While the skill discusses authentication (tokens and environment variables like RIVET_TOKEN), it correctly uses placeholders and follows industry standards for secret management, such as recommending environment variables over hardcoded strings.\n- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install a specific version of a public NPM package and to add supplementary skills. These are standard procedures for utilizing external developer tools.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes a specific security recommendation regarding actor keys, advising developers to use arrays rather than string interpolation to prevent key injection, which demonstrates a security-conscious design.
Audit Metadata