reactive-engine
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages under the
@virtuoso.devNPM organization, such as@virtuoso.dev/reactive-engine-coreand@virtuoso.dev/reactive-engine-query. These are vendor-owned resources and are standard for this framework. - [DATA_EXFILTRATION]: The library includes components for data fetching (
Query,Mutation) using the browser'sfetchAPI and state persistence vialocalStorage,sessionStorage, and cookies. These are primary, intended features of the Reactive Engine used for application state management and do not exhibit unauthorized behavior. - [COMMAND_EXECUTION]: Documentation include standard
npm installinstructions for setting up the development environment. - [INDIRECT_PROMPT_INJECTION]: As a state management toolkit, the library provides surface area for data ingestion (e.g., query results, storage hydration). The documentation includes best practices for safety, such as a redaction mechanism in the diagnostics tools (
redactoption) to prevent accidental exposure of sensitive values.
Audit Metadata