ai
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [External Tool Integration]: The skill demonstrates using the Model Context Protocol (MCP) to extend agent capabilities, which involves fetching and executing tools via
npx. In the provided example, it references the@anthropic/mcp-server-filesystempackage. Since this package originates from a trusted organization, this is a standard and secure method for adding specialized functionality like filesystem access to an agent.\n- [Package Management]: Instructions are included to install thevercel-ai-sdkusing theuvpackage manager. This is a routine operation for setting up the development environment required to use the documented module.\n- [Environment-Based Credential Management]: The module is designed to automatically configure clients using standard environment variables such asANTHROPIC_API_KEYandOPENAI_API_KEY. This is a recommended security practice that avoids hardcoding sensitive credentials directly in source code.\n- [Human-in-the-Loop Hooks]: The skill documentation includes a robust 'hooks' system for implementing approval gates. This is a positive security feature that allows developers to require explicit human confirmation before an agent performs potentially sensitive actions.
Audit Metadata