ai-sdk
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform standard development tasks using package managers like
npmandpnpmto install theaipackage and its provider-specific extensions. It also utilizes shell commands likegrepto search through local documentation andnpm viewto check for package updates. - [EXTERNAL_DOWNLOADS]: Fetches current model data from Vercel's official AI Gateway (
https://ai-gateway.vercel.sh/v1/models) usingcurl. This is used to ensure the agent uses valid, up-to-date model identifiers rather than relying on potentially outdated training data. As Vercel is a well-known service, this remote data retrieval is considered safe for its intended purpose.
Audit Metadata