rivetkit
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of markdown documentation and an OpenAPI specification. No executable code or malicious scripts are bundled with the skill.
- [SAFE]: Provides security-focused guidance, specifically instructing users on how to prevent key injection attacks by using array-based compound keys instead of string interpolation.
- [SAFE]: Recommends standard security practices for authentication, such as using "onBeforeConnect" and "createConnState" hooks to validate tokens and enforce access control.
- [SAFE]: Guidance on secret management correctly advises using environment variables (e.g., "RIVET_TOKEN", "STRIPE_KEY") rather than hardcoding sensitive credentials in source code.
Audit Metadata