Gen Digital embeds safety ratings into Vercel’s skills marketplace via Agent Trust Hub

Gen Digital integrates independent safety ratings into Vercel’s skills marketplace

Gen Digital is embedding its Agent Trust Hub (ATH) into Vercel’s skills.sh directory to provide independent, AI‑driven safety verification and transparent risk ratings for modular AI skills. The partnership links Gen’s security technology with Vercel’s developer platform — used by more than 6 million developers — so that each skill listed on skills.sh is scanned by ATH and assigned one of four classifications: Safe, Low Risk, High Risk or Critical Risk. The move aims to give developers and end users clearer security posture information before installing or executing agent capabilities.

The integration surfaces ATH findings and the rationale alongside each skill listing, including machine‑readable metadata, audit trails and suggested mitigations to reduce deployment risk. Gen Digital positions the system to address growing concerns as autonomous agents evolve from assistants into powerful digital actors that browse the web, call APIs, access sensitive data and trigger multi‑step workflows. Until now, safety assessments for skills often rely on limited metadata or community reputation; embedding independent verification directly into the discovery experience is intended to scale safety and innovation together across the composable skills marketplace.

Executives frame the collaboration as a step toward systemic trust. Howie Xu, Gen’s Chief AI & Innovation Officer, says trust must be embedded in the ecosystem as agents gain greater autonomy, while Andrew Qu, Vercel’s Chief of Software, says the partnership helps developers move quickly while giving users greater confidence through transparency. Gen and Vercel say the system aims to reduce incidents caused by exploitable skills, accelerate safe adoption of composable capabilities, and provide an auditable record for organisations and regulators evaluating third‑party agent components.

Operational rollout and technical integration

The companies expect a pilot rollout later this year, during which ATH will analyze published skills and surface classifications and mitigation suggestions on skills.sh. The integration provides machine‑readable outputs and audit trails intended to support automated compliance checks and faster incident investigation for teams deploying agent capabilities.

Market impact and regulatory relevance

By introducing a third‑party verification layer into a widely used discovery layer, Gen Digital and Vercel signal a shift toward built‑in safety for the AI agent ecosystem. The initiative aims to reduce exposure to vulnerabilities, data leakage and fraud from poorly designed or malicious skills, and to give enterprises and regulators clearer evidence when assessing the risks of third‑party agent components.