build-agents

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Project Scaffolding Commands: The skill provides instructions to use npx eve@latest init and bunx eve init. These are standard command-line patterns for initializing a new project using the 'eve' framework from its official package registry.
  • Skill Installation: It recommends expanding functionality via npx skills add vercel-labs/slack-agent-skill. This is a routine operation for modular skill management, utilizing a repository from a recognized organization.
  • Trusted External References: The skill points to official documentation and source code hosted on established domains like eve.dev and vercel.com, as well as GitHub repositories under the vercel and vercel-labs organizations.
  • Security Best Practices: The 'Boundaries' section explicitly advises against hardcoding sensitive credentials such as API keys, Slack tokens, or signing secrets into generated code, promoting secure development habits.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:02 PM
Security Audit — agent-trust-hub — build-agents