skills/openai/plugins/ai-sdk/Gen Agent Trust Hub

ai-sdk

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [Standard Dependency Management]: The documentation references several Node.js packages for the Vercel AI SDK. These are routine dependencies used to integrate various LLM providers and are hosted on standard package registries.
  • [Development Utility Execution]: The skill mentions using npx for tasks like project migration, debugging, and installing UI components. These are standard developer tools used to simplify project maintenance.
  • [Authentication Best Practices]: A focus is placed on using Vercel OIDC for secure, short-lived token authentication. This approach aligns with industry standards for minimizing the risks associated with long-lived API keys.
  • [Human-in-the-Loop Controls]: The skill highlights the needsApproval pattern for tool execution. This security feature ensures that sensitive operations require explicit user confirmation before proceeding.
  • [Provider and Model Integration]: Instructions are provided for connecting to various model providers via the AI Gateway or direct SDKs. These configurations are part of the core functionality of the library being documented.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 03:11 PM