skills/vercel-labs/py-ai/ai/Gen Agent Trust Hub

ai

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [External Tool Integration]: The skill demonstrates using the Model Context Protocol (MCP) to extend agent capabilities, which involves fetching and executing tools via npx. In the provided example, it references the @anthropic/mcp-server-filesystem package. Since this package originates from a trusted organization, this is a standard and secure method for adding specialized functionality like filesystem access to an agent.\n- [Package Management]: Instructions are included to install the vercel-ai-sdk using the uv package manager. This is a routine operation for setting up the development environment required to use the documented module.\n- [Environment-Based Credential Management]: The module is designed to automatically configure clients using standard environment variables such as ANTHROPIC_API_KEY and OPENAI_API_KEY. This is a recommended security practice that avoids hardcoding sensitive credentials directly in source code.\n- [Human-in-the-Loop Hooks]: The skill documentation includes a robust 'hooks' system for implementing approval gates. This is a positive security feature that allows developers to require explicit human confirmation before an agent performs potentially sensitive actions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 11:37 AM