v0-dev
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Official Service Integration: The skill describes interactions with Vercel's v0 platform using official CLI tools and APIs. This includes instructions for project initialization and component management via
npx, which is the standard deployment and integration method for this ecosystem. - Package and Dependency Management: The documentation references several official Node.js packages, such as
v0-sdkand@v0-sdk/ai-tools. These are legitimate libraries intended for programmatic access to the v0 API and are hosted on public registries. - Secure Authentication Practices: The skill correctly advises the use of environment variables (e.g.,
V0_API_KEY) for handling sensitive authentication tokens, following industry best practices for secure development. - Remote Resource Usage: The instructions include commands to fetch components directly from the
v0.devdomain. This is a core feature of the service designed to streamline UI development.
Audit Metadata