reactive-engine

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages under the @virtuoso.dev NPM organization, such as @virtuoso.dev/reactive-engine-core and @virtuoso.dev/reactive-engine-query. These are vendor-owned resources and are standard for this framework.
  • [DATA_EXFILTRATION]: The library includes components for data fetching (Query, Mutation) using the browser's fetch API and state persistence via localStorage, sessionStorage, and cookies. These are primary, intended features of the Reactive Engine used for application state management and do not exhibit unauthorized behavior.
  • [COMMAND_EXECUTION]: Documentation include standard npm install instructions for setting up the development environment.
  • [INDIRECT_PROMPT_INJECTION]: As a state management toolkit, the library provides surface area for data ingestion (e.g., query results, storage hydration). The documentation includes best practices for safety, such as a redaction mechanism in the diagnostics tools (redact option) to prevent accidental exposure of sensitive values.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 12:34 PM