create-call
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official vendor packages including the
@vapi-ai/server-sdkand@vapi-ai/webNPM packages, and thevapiPython library. These are standard resources provided by the service provider for API integration. - [COMMAND_EXECUTION]: Provides standard cURL examples and instructions for running the official Vapi MCP server using
npx. These commands are used for legitimate interaction with the Vapi API. - [CREDENTIALS_UNSAFE]: Follows security best practices by instructing users to store sensitive API keys in environment variables (e.g.,
VAPI_API_KEY) rather than hardcoding them within the skill or scripts.
Audit Metadata