addon-vercel-ai-labs
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a workflow for handling user-controlled chat messages via an LLM, creating a surface for indirect prompt injection.\n- Ingestion points:
src/lib/ai/schemas.tsdefinesAiChatRequestSchema, which accepts amessagestring from users.\n- Boundary markers: The skill does not prescribe the use of delimiters (such as XML tags) or specific system instructions to ignore embedded commands in user input.\n- Capability inventory: The skill enables LLM invocation via the Vercel AI SDK within Next.js route handlers.\n- Sanitization: Input length is enforced via Zod, but no content-level sanitization or escaping is required before the input is passed to the AI provider.\n- [EXTERNAL_DOWNLOADS]: Fetches dependencies including the Vercel AI SDK (ai),zod, and official provider packages (@ai-sdk/openai,@ai-sdk/anthropic, etc.) from well-known registries via the Bun package manager.\n- [COMMAND_EXECUTION]: Executes local shell commands such asbun run lint,bun run build,test, andrgto verify code quality and project structure during integration.
Audit Metadata