infra-platform-vercel
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior or safety filters were detected. The instructions focus on technical configuration and architectural patterns for the Vercel platform.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill includes examples for using environment variables safely and explicitly warns against hardcoding secrets in source code or configuration files.
- [REMOTE_CODE_EXECUTION]: No malicious remote code execution patterns were found. Remote URL references are limited to official schemas (e.g., vercel.json schema) and placeholder examples. Package references are for well-known, legitimate developer tools.
- [COMMAND_EXECUTION]: CLI commands mentioned (such as
vercel envoropenssl) are standard developer workflows for the target platform and are used in a benign context. - [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill provides clear instructions on how to manage secrets securely using Vercel's native environment variable system and generating secrets with
openssl. - [OBFUSCATION]: No obfuscated code, hidden characters, or deceptive encoding techniques were detected in the instructions or scripts.
- [SAFE]: The skill follows industry security standards and provides helpful 'Red Flag' sections to guide users away from common security pitfalls on the Vercel platform, such as unprotected cron endpoints.
Audit Metadata