ai-token-counter

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard logging utility pattern. It wraps AI SDK functions to capture usage statistics and transmits them to a user-configured Supabase instance.
  • [CREDENTIALS_UNSAFE]: The skill references standard environment variables such as SUPABASE_SERVICE_ROLE_KEY and PROJECT_SLUG. These are required for the stated functionality, and the documentation follows best practices by instructing the user to store them in a .env.local file.
  • [EXTERNAL_DOWNLOADS]: The skill relies on well-known and reputable packages, including ai (Vercel AI SDK) and @supabase/supabase-js. The Deno implementation examples reference esm.sh, which is an established and trusted content delivery network for JavaScript and TypeScript modules.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 05:03 PM