ai-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Package Installation: The skill references installing the official
aipackage and related provider/client libraries (e.g.,@ai-sdk/openai,@ai-sdk/react). These are standard dependencies provided by the vendor for the functionality described. - Network Operations: The instructions include fetching current model metadata from
ai-gateway.vercel.shusingcurl. This is a routine operation to ensure the agent has access to the latest model versions from the vendor's infrastructure. - Local Documentation Access: The skill searches local directories (
node_modules/ai/docs/) and vendor-hosted documentation (ai-sdk.dev). This is expected behavior for a developer tool providing implementation guidance. - Developer Tooling: The skill mentions using
@ai-sdk/devtoolsfor local debugging and observability, which involves running a local server and writing to a local.devtoolsdirectory. These are standard practices for development environments.
Audit Metadata