rivetkit-client-javascript
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and implementation examples for the RivetKit JavaScript library.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The skill uses standard placeholders (e.g.,
pk_...,jwt-token-here) and correctly advises the use of environment variables for sensitive configuration. - [EXTERNAL_DOWNLOADS]: The skill references the official
rivetkitpackage from the public npm registry and provides standard installation instructions. - [PROMPT_INJECTION]: Includes explicit security guidance to prevent injection vulnerabilities by advising against string interpolation when constructing actor keys.
Audit Metadata