Skip to content
skillsafebeta
← Report library
Purpose / Other

Ai Sdk Skill Security Audit

What the author says it does (original text)

Answer questions about the AI SDK and help build AI-powered features. Use when developers: (1) Ask about AI SDK functions like generateText, streamText, ToolLoopAgent, embed, or tools, (2) Want to build AI agents, chatbots, RAG systems, or text generation features, (3) Have questions about AI providers (OpenAI, Anthropic, Google, etc.), streaming, tool calling, structured output, or embeddings, (4

Independent security check

Security risks found

Files checked
1
Risks found
3
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
Medium risk

The Skill installs an npm package when the dependency is absent

Source references: 2
What we found

It directs the agent to run the project's package manager when `node_modules/ai/` is missing, without first requiring user confirmation. Installation fetches and processes the selected package and commonly changes the dependency manifest, lockfile, and `node_modules`.

Why this matters

A project may be persistently modified even when the user only wanted documentation or design advice. The install also introduces npm supply-chain and package lifecycle-script execution risk.

This is an active instruction to install when the directory is absent, without requiring prior user confirmation. The purpose is legitimate, but a package manager fetches code and commonly changes `node_modules`, the dependency manifest, and lockfile, and may run install lifecycle scripts. The user can restrict the agent to existing dependencies or require approval of the package, version, and expected file changes before installation.

SKILL.md:23In the instructionsOpen original file
1. Ensure `ai` is installed. If `node_modules/ai/` does not exist, install **only** the `ai` package using the project's package manager (e.g. `pnpm add ai`). Install provider packages (e.g. `@ai-sdk/openai`) and framework packages (e.g. `@ai-sdk/react`) later, when the task requires them.2. Read and grep the bundled docs at `node_modules/ai/docs/` and the source at `node_modules/ai/src/`.
Show 1 other places
SKILL.md:21In the instructionsOpen original file
The `ai` package ships its full documentation and source code inside `node_modules`. These always match the installed version, so trust them over anything you remember.
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Recommended DevTools records model requests, responses, and tool calls

Source references: 2
What we found

The Skill recommends DevTools during development and states that it captures requests, responses, tool calls, and multi-step runs. Those records may contain user input, model output, business data, or tool arguments; no redaction, retention, or access-control requirement is stated.

Why this matters

Anyone able to access the local developer tool, its storage, or its debugging interface may see the recorded data. Debug records expand exposure when the application handles credentials, personal information, or internal material.

The Skill explicitly recommends DevTools during development and says it captures requests, responses, tool calls, and multi-step runs. If enabled, those records may contain prompts, model output, and tool arguments. The text limits use to local development but does not specify storage location, access controls, redaction, or cleanup. The user can require those details before enabling it and prohibit capture of production data or secrets.

SKILL.md:63In the instructionsOpen original file
AI SDK DevTools captures your AI SDK calls - requests, responses, tool calls, token usage, and multi-step runs - so you can inspect exactly what your agents do. Use it while developing to debug generations. It is a separate package and is intended for local development only.For setup instructions, read the bundled DevTools documentation.
Show 1 other places
SKILL.md:65In the instructionsOpen original file
For setup instructions, read the bundled DevTools documentation.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Low risk

The install command does not pin a dependency version

Source references: 1
What we found

The installation command does not specify dependency versions. The same command may download different code later, so what you install can differ from what was checked.

Why this matters

A later install may download different code even though the command and this report have not changed.

This is a legitimate dependency install intended to obtain version-matched documentation, but the example `pnpm add ai` does not pin a version. It may resolve to different releases over time and modify project dependencies and lockfiles. The user can require the exact version to be reported first or restrict installation to a locked or explicitly approved version.

SKILL.md:23In the instructionsOpen original file
1. Ensure `ai` is installed. If `node_modules/ai/` does not exist, install **only** the `ai` package using the project's package manager (e.g. `pnpm add ai`). Install provider packages (e.g. `@ai-sdk/openai`) and framework packages (e.g. `@ai-sdk/react`) later, when the task requires them.2. Read and grep the bundled docs at `node_modules/ai/docs/` and the source at `node_modules/ai/src/`.
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

8 instruction sections

This Skill supports Vercel AI SDK development and directs the agent to consult documentation and source bundled with the installed version instead of relying on memory.

View source
SKILL.md:17In the instructionsOpen original file
**Never write AI SDK code from memory.** Always verify every API, option, and pattern against the documentation and source code for the version that is actually installed in the project.
SKILL.md:24In the instructionsOpen original file
1. Ensure `ai` is installed. If `node_modules/ai/` does not exist, install **only** the `ai` package using the project's package manager (e.g. `pnpm add ai`). Install provider packages (e.g. `@ai-sdk/openai`) and framework packages (e.g. `@ai-sdk/react`) later, when the task requires them.2. Read and grep the bundled docs at `node_modules/ai/docs/` and the source at `node_modules/ai/src/`.3. Provider and framework packages bundle their own docs at `node_modules/@ai-sdk/<name>/docs/`.4. If something isn't in the bundled docs, search https://ai-sdk.dev/docs. You can append `.md` to any docs page URL to get its markdown, and search via `https://ai-sdk.dev/api/search-docs?q=your_query`.

When local material is insufficient, the Skill directs the agent to AI SDK documentation, its documentation-search endpoint, and the AI Gateway model list. Requests disclose timing, network metadata, and any search terms to those Vercel domains.

View source
SKILL.md:26In the instructionsOpen original file
3. Provider and framework packages bundle their own docs at `node_modules/@ai-sdk/<name>/docs/`.4. If something isn't in the bundled docs, search https://ai-sdk.dev/docs. You can append `.md` to any docs page URL to get its markdown, and search via `https://ai-sdk.dev/api/search-docs?q=your_query`.5. If you cannot find support for an answer in the docs or source, say so explicitly — do not guess.
SKILL.md:43In the instructionsOpen original file
Never use model IDs from memory — models are released and retired frequently. Fetch the current list before writing code that references a model. Do not truncate the list (e.g. with `head`) so you can find the newest models:```bash# All available modelscurl -s https://ai-gateway.vercel.sh/v1/models | jq -r '.data[].id'# Filter by provider (e.g. anthropic, openai, google)curl -s https://ai-gateway.vercel.sh/v1/models | jq -r '[.data[] | select(.id | startswith("anthropic/")) | .id] | reverse | .[]'```

The Skill recommends supplying AI Gateway credentials through an environment variable, but it does not instruct the agent to read, display, or transmit the variable's value.

View source
SKILL.md:35In the instructionsOpen original file
1. Authenticate with OIDC (for Vercel deployments) or get an AI Gateway API key.2. Provide it to your app via the `AI_GATEWAY_API_KEY` environment variable.3. Reference models with `provider/model` strings.
Start here · InstructionsSKILL.md
ai-sdk
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Connect to websites
SKILL.md:10In the instructionsOpen original file
- Repository: https://github.com/vercel/ai- Documentation: https://ai-sdk.dev/docs
SKILL.md:11In the instructionsOpen original file
- Repository: https://github.com/vercel/ai- Documentation: https://ai-sdk.dev/docs
SKILL.md:26In the instructionsOpen original file
3. Provider and framework packages bundle their own docs at `node_modules/@ai-sdk/<name>/docs/`.4. If something isn't in the bundled docs, search https://ai-sdk.dev/docs. You can append `.md` to any docs page URL to get its markdown, and search via `https://ai-sdk.dev/api/search-docs?q=your_query`.5. If you cannot find support for an answer in the docs or source, say so explicitly — do not guess.
Install extra software packages
SKILL.md:23In the instructionsOpen original file
1. Ensure `ai` is installed. If `node_modules/ai/` does not exist, install **only** the `ai` package using the project's package manager (e.g. `pnpm add ai`). Install provider packages (e.g. `@ai-sdk/openai`) and framework packages (e.g. `@ai-sdk/react`) later, when the task requires them.2. Read and grep the bundled docs at `node_modules/ai/docs/` and the source at `node_modules/ai/src/`.
Read keys or account settings
SKILL.md:36In the instructionsOpen original file
1. Authenticate with OIDC (for Vercel deployments) or get an AI Gateway API key.2. Provide it to your app via the `AI_GATEWAY_API_KEY` environment variable.3. Reference models with `provider/model` strings.
Run commands
SKILL.md:45In the instructionsOpen original file
```bash# All available models
Lines read
79
File checksum (to compare versions)
d35c4499d1408e62a66e52ee57809dc198169f5e157aa4bcaa318bda810bb685