ai-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches updated model lists and API metadata from official Vercel endpoints (ai-gateway.vercel.sh) and retrieves current documentation from the AI SDK portal (ai-sdk.dev). These operations are scoped to trusted, well-known services associated with the skill's primary purpose.- [COMMAND_EXECUTION]: Uses standard development utilities like grep, jq, and package managers (pnpm) to search the local node_modules directory and retrieve information from official APIs. These commands are necessary for the skill's documentation-search and environment-check features.- [SAFE]: Promotes secure credential handling by instructing developers to use .env.local files for API keys. It also relies on official NPM packages for all suggested features and debugging tools.
Audit Metadata