vercel-cli

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/vercel-bypass.sh

This module is not overtly malware-like (no obfuscation, no shellcode, no reverse shell, no system damage), but it is explicitly designed to bypass Vercel deployment protection by creating/using protection-bypass tokens and by sending a bypass secret as an HTTP header to fetch protected content. It therefore carries high misuse potential and may leak sensitive token/secret values to stdout via unredacted jq output depending on what the Vercel API returns. Treat as a security-sensitive authorization-bypass utility and restrict handling/logging of secrets and outputs.

Confidence: 74%Severity: 78%
Audit Metadata
Analyzed At
Sep 9, 2026, 08:55 PM
Package URL
pkg:socket/skills-sh/arthjean%2Fskills%2Fvercel-cli%2F@67e0edd00a4e652e102098de91620b7674f20d4b1905b7106a517be2a9f71128