ai-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
grepandglobto search within thenode_modulesdirectory for documentation and source code snippets. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the official domain
ai-sdk.dev(a well-known service) to provide up-to-date API information. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external documentation sites, creating a potential surface for indirect prompt injection if those sites were compromised or contained malicious instructions.
- Ingestion points: External documentation URLs from
ai-sdk.dev(defined inSKILL.md). - Boundary markers: The instructions do not define specific delimiters to isolate external documentation from agent instructions.
- Capability inventory: The skill uses file system searching (
grep,glob) and relies on the agent's network capabilities. - Sanitization: There is no explicit sanitization step for the fetched documentation before it is processed by the agent.
Audit Metadata