ai
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The documentation describes the use of
ai.mcp.get_stdio_toolsto run local commands likenpx. This is an intended feature for integrating Model Context Protocol (MCP) servers, allowing agents to perform tasks such as file system interaction. - [External Resource Management]: Includes instructions for package installation and fetching tools from remote HTTP endpoints, which are routine procedures for the SDK's setup and operation.
- [Credential Management]: Guidance is provided for using environment variables to securely manage API keys for AI service providers.
- [Data Ingestion Surface]: The SDK handles data from user messages and tool results (Ingestion points:
ai.user_messageand tool results inSKILL.md). It utilizes structured roles and context management (Boundary markers:system,user,assistantroles) to maintain context. Capabilities include subprocess execution and network requests (Capability inventory:get_stdio_toolsand API streaming). It uses Pydantic to ensure data conforms to expected schemas (Sanitization: Pydantic validation).
Audit Metadata