netlify-ai-gateway
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches live provider configuration and model availability from Netlify's official API (
api.netlify.com). This is a well-known service. - [EXTERNAL_DOWNLOADS]: References and recommends the installation of official provider SDKs and Netlify development tools from standard registries.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the development of endpoints that process user-supplied data (e.g., via
req.json()) and pass it to LLM providers. - Ingestion points: Netlify Functions (
netlify/functions/*.js) accepting HTTP request bodies in theTypeSafeandOpenAIexamples. - Boundary markers: Not explicitly implemented in the provided code snippets.
- Capability inventory: Executes network requests to AI providers via official SDKs.
- Sanitization: Not explicitly shown in code examples; relies on the developer to implement input validation before passing data to model providers.
Audit Metadata