ai
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official SDKs and libraries from well-known technology providers such as Vercel and Supabase.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transfer or credential harvesting was found. The skill correctly instructs users to manage sensitive API keys via environment variables rather than hardcoding them, and only targets legitimate service endpoints.
- [PROMPT_INJECTION]: The skill's instructions do not contain patterns for bypassing safety filters, system prompt extraction, or role-play jailbreaks.
- [COMMAND_EXECUTION]: The skill requests standard file-system and shell tools (Read, Write, Edit, Bash) to facilitate the implementation of its code templates within a project, which is consistent with its stated purpose as a developer tool.
- [EXTERNAL_DOWNLOADS]: The documentation references installation of standard, versioned packages from the official npm registry, such as the Vercel AI SDK and the OpenRouter provider.
Audit Metadata