Skip to main content

rivetkit-client-react

Guides developers in building React applications that connect to Rivet Actors, facilitating real-time state management and hooks creation.

Install this skill

or
79/100

Security score

The rivetkit-client-react skill was audited on Jun 24, 2026 and we found 7 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 259

Template literal with variable interpolation in command context

SourceSKILL.md
259Don't build keys with string interpolation like `"org:${userId}"` when `userId` contains user data. Use arrays instead to prevent key injection attacks.
low line 185

Fetch to external URL

SourceSKILL.md
185const response = await handle.fetch("history");
low line 37

External URL reference

SourceSKILL.md
37endpoint: "https://my-namespace:[email protected]",
low line 234

External URL reference

SourceSKILL.md
234const { useActor } = createRivetKit<typeof registry>("http://localhost:6420");
low line 270

External URL reference

SourceSKILL.md
270Defaults to `http://localhost:6420` when unset. RivetKit runs on port 6420 by default.
low line 277

External URL reference

SourceSKILL.md
277https://namespace:[email protected]
low line 284

External URL reference

SourceSKILL.md
284**Package:** [@rivetkit/react](https://www.npmjs.com/package/@rivetkit/react)
Scanned on Jun 24, 2026
View Security Dashboard
Installation guide →