ai-sdk
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Standard Dependency Management]: The documentation references several Node.js packages for the Vercel AI SDK. These are routine dependencies used to integrate various LLM providers and are hosted on standard package registries.
- [Development Utility Execution]: The skill mentions using
npxfor tasks like project migration, debugging, and installing UI components. These are standard developer tools used to simplify project maintenance. - [Authentication Best Practices]: A focus is placed on using Vercel OIDC for secure, short-lived token authentication. This approach aligns with industry standards for minimizing the risks associated with long-lived API keys.
- [Human-in-the-Loop Controls]: The skill highlights the
needsApprovalpattern for tool execution. This security feature ensures that sensitive operations require explicit user confirmation before proceeding. - [Provider and Model Integration]: Instructions are provided for connecting to various model providers via the AI Gateway or direct SDKs. These configurations are part of the core functionality of the library being documented.
Audit Metadata