workflow
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [Official Platform Integration]: The skill facilitates the use of official Vercel Workflow tools and libraries, including the
@vercel/workflowpackage and thenpx workflowCLI. These resources are part of the vendor's standard offering for building and managing durable tasks.\n- [Sandbox Security Awareness]: It provides clear guidance on the limitations of the workflow sandbox, such as the unavailability ofsetTimeoutand nativefetch, and recommends using platform-provided primitives likesleep()andimport { fetch } from "workflow"to maintain execution integrity.\n- [Agentic Workflow Design]: The documentation forDurableAgentillustrates how to build AI-driven workflows with structured tools and streaming capabilities. It encourages the use of"use step"functions for logic requiring full Node.js access, ensuring a clear separation between durable orchestration and side-effect-heavy operations.\n- [Verified Dependency Usage]: The skill references well-known, versioned packages from the Vercel organization and the broader AI SDK community, supporting a secure and predictable development environment.
Audit Metadata