build-agents
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Project Scaffolding Commands: The skill provides instructions to use
npx eve@latest initandbunx eve init. These are standard command-line patterns for initializing a new project using the 'eve' framework from its official package registry. - Skill Installation: It recommends expanding functionality via
npx skills add vercel-labs/slack-agent-skill. This is a routine operation for modular skill management, utilizing a repository from a recognized organization. - Trusted External References: The skill points to official documentation and source code hosted on established domains like
eve.devandvercel.com, as well as GitHub repositories under thevercelandvercel-labsorganizations. - Security Best Practices: The 'Boundaries' section explicitly advises against hardcoding sensitive credentials such as API keys, Slack tokens, or signing secrets into generated code, promoting secure development habits.
Audit Metadata