ai-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- Vendor-Owned External Data Retrieval: The skill utilizes
curlto fetch model identifiers fromhttps://ai-gateway.vercel.sh/v1/models. This is a legitimate functional requirement for retrieving up-to-date model lists from the vendor's official service. - Package Management: The skill suggests installing the
aipackage and related provider/framework libraries (e.g.,@ai-sdk/openai,@ai-sdk/react). These are established, official packages associated with the skill's primary purpose. - Documentation Sourcing: The instructions prioritize reading bundled documentation from within the project's
node_modulesor from the official documentation siteai-sdk.dev. This is a best practice to ensure the AI agent uses information that matches the specific version of the software installed in the user's environment.
Audit Metadata