vercel-ai-sdk
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes documentation and samples for agents with high-capability tools that execute model-generated content. Examples include:
- Ingestion points: The
messagesandpromptparameters in files such assamples/natural-language-postgres.mdandsamples/computer-use-anthropic-tools.mdingest user-controlled text. - Boundary markers: Many snippets omit explicit boundary markers (e.g., delimiters for untrusted input) as they focus on API usage demonstrations.
- Capability inventory: The samples demonstrate tools that execute raw SQL queries (
samples/natural-language-postgres.md) or shell commands (samples/computer-use-anthropic-tools.md,samples/agent-skills-load-skill-tool.md). - Sanitization: The skill provides explicit security warnings within the documentation, recommending read-only database connections, dedicated VM isolation, and human-in-the-loop approval flows for sensitive operations.
- [DYNAMIC_EXECUTION]: Multiple code samples demonstrate the implementation of tools that perform dynamic execution to showcase the library's capabilities. Specifically:
samples/computer-use-anthropic-tools.mdshows a bash tool usingchild_process.execSyncto run model-supplied commands.samples/agent-skills-load-skill-tool.mdimplements a tool that executes commands within a provided sandbox abstraction.
Audit Metadata