liveblocks-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural guidance and code snippets for integrating Liveblocks SDKs. All patterns align with industry standard security practices, such as delegating authentication to server-side endpoints and using environment variables for secret storage.
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of official Liveblocks packages and related open-source libraries like 'react-error-boundary', '@xyflow/react', and 'y-utility'. These are standard dependencies for building collaborative React applications.
- [DATA_EXPOSURE]: No hardcoded secrets were identified. Examples consistently use placeholders or environment variable references (e.g., 'process.env.LIVEBLOCKS_SECRET_KEY') to handle sensitive keys safely.
- [COMMAND_EXECUTION]: The skill documents the use of official CLI tools for project scaffolding and local development (e.g., 'npx create-liveblocks-app', 'npx liveblocks dev'). These commands are standard for the developer workflow described.
- [PROMPT_INJECTION]: While the skill includes components for building AI-powered chat and collaborative agents, it does not introduce malicious prompts. It provides the infrastructure for these features, noting that developers can configure system prompts and tools through official vendor dashboards.
Audit Metadata