skills/usevowel/skills/vowel-react/Gen Agent Trust Hub

vowel-react

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides architectural guidance and code patterns for integrating the Vowel voice platform. All referenced resources and packages (@vowel.to/client) are consistent with the skill's author (usevowel).
  • [SAFE]: Documentation explicitly warns against hardcoding private keys and recommends using public environment variables (e.g., NEXT_PUBLIC_VOWEL_APP_ID) for client-side identifiers.
  • [SAFE]: The skill promotes a state-driven architecture where voice actions modify the application store rather than manipulating the DOM directly, reducing the risk of unexpected UI behavior or interference with React's rendering cycle.
  • [SAFE]: The skill implements boundary markers and explicit instructions for the AI to treat application context as the source of truth, mitigating risks associated with processing application state.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 03:33 PM
Security Audit — agent-trust-hub — vowel-react