Automated security audits now available for skills.sh
Skills.sh now offers automated security audits performed by independent partners to help developers safely discover and install skills. Malicious skills are automatically hidden from search and leaderboards, and audit results are transparently displayed before installation.
Skills on the now have automated security audits to help developers use skills with confidence.skills.sh
Working with our partners , , and , these independent security reports allow us to rapidly scale and audit over 60,000 skills and counting.GenSocketSnyk
provides greater ecosystem support with:Skills.sh
Learn more at .skills.sh
Transparent results: Security audits appear publicly on each skill's detail page.
Leaderboard protection : Skills flagged as malicious are automatically hidden from the leaderboard and search results. If you navigate directly to a flagged skill, a warning note appears before installation.
Security validation: As of , adding skills clearly displays audit results and risk levels before installation.
skills@1.4.0
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.