# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | conditional |
| Overall grade | B |
| Finding counts | critical: 0 · high: 0 · medium: 1 · low: 0 · info: 15 |
| Scanner runs | 2 |
| Freshness | unreachable (last verified unknown) |
| Verdict policy version | consensus-v1 |

### Findings

- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] No prompt injection or jailbreak signals detected
- **info** [security] No repository link
- **info** [security] No secrets or unsafe code patterns detected
- **info** [security] Skill does not specify a license
- **info** [structure] No scripts/ directory
- **info** [structure] references/ directory present
- **info** [structure] SKILL.md present
- **info** [structure] Valid name field
- **info** [description] Description includes usage context
- **info** [description] Description within character limit
- **info** [best-practices] Examples included
- **info** [best-practices] No clear workflow structure
- **info** [best-practices] Progressive disclosure used
- **info** [best-practices] SKILL.md exceeds 500 lines
- **info** [evals] No evaluation test cases

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/101-skills/skills/tree/main/sdk/javascript-sdk |
| Assessed at | 2026-08-05T22:04:11.333Z |
| Published at | 2026-08-05T22:04:11.333Z |
| Public ID | 95488814-0a5a-4e36-9b55-9ff0a5d985a9 |
| Canonical page | https://vettd.agentichighway.ai/skill/95488814-0a5a-4e36-9b55-9ff0a5d985a9 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> javascript-sdk

Description:

> JavaScript/TypeScript SDK for inference.sh - run AI apps, build agents, integrate with all models. Package: @inferencesh/sdk (npm install). Full TypeScript support, streaming, file uploads. Build agents with template or ad-hoc patterns, tool builder API, skills, human approval. Use for: JavaScript integration, TypeScript, Node.js, React, Next.js, frontend apps. Triggers: javascript sdk, typescript sdk, npm install, node.js api, js client, react ai, next.js ai, frontend sdk, @inferencesh/sdk, typescript agent, browser sdk, js integration

Author:

> 101-skills

Version:

> _not provided_

License:

> _not provided_