rivet-dynamic-apps

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill demonstrates interaction with an embedded SQLite database using the database.execute method in the apps-sqlite example (e.g., in examples/apps-sqlite/fixtures/app/src/index.ts). These operations use parameterized queries to prevent SQL injection.
  • [DYNAMIC_EXECUTION]: The core functionality revolves around the deployApp utility, which facilitates the deployment of application code. In examples/apps-hello-world/src/deploy.ts, the skill shows how to programmatically generate and deploy application files including a package.json and source code. This is the primary intended use case for the Dynamic Apps framework.
  • [EXTERNAL_DOWNLOADS]: The examples reference and fetch dependencies from the official Rivet platform and reputable registries. All URLs point to vendor-owned domains (rivet.dev) or official GitHub repositories (github.com/rivet-dev/agentos).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 01:41 PM
Security Audit — agent-trust-hub — rivet-dynamic-apps