rive
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and examples for using the Rive animation runtime, which is a legitimate design and development tool.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Rive packages from the npm registry (@rive-app/canvas, @rive-app/react-canvas, etc.), which are well-known and trusted sources for this specific animation framework.
- [COMMAND_EXECUTION]: The skill includes standard npm installation commands for the required dependencies, which is expected behavior for a developer-oriented skill.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file access, or unauthorized network operations were identified. The code examples handle local application state and standard DOM events.
- [DYNAMIC_EXECUTION]: The skill does not use any dynamic code execution patterns like eval() or exec(), nor does it perform runtime compilation of untrusted code.
Audit Metadata