vercel-cli
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
bunxpackage runner to execute thevercelCLI and thectx7documentation tool from the npm registry. The Vercel CLI is an official tool from a well-known service. - [COMMAND_EXECUTION]: Several Bash scripts automate interactions with Vercel's infrastructure. These scripts securely handle the
VERCEL_TOKENby using temporary file descriptors (3<<<) duringcurlcalls, which prevents the secret from appearing in process logs. - [INDIRECT_PROMPT_INJECTION]: The skill reads external data that could contain malicious instructions.
- Ingestion points: Deployment logs in
scripts/vercel-logs.shand external content fetched viascripts/vercel-bypass.sh. - Boundary markers: There are no technical delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory: Includes execution of remote packages via
bunx, network access viacurl, and file modifications viaenv pullorvercel link. - Sanitization: The skill uses
jqto process JSON data and regular expressions to validate environment variable names inscripts/vercel-env.sh.
Audit Metadata