vercel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Vercel skill accesses deployment comments, logs, and user content where outsiders can inject free text via webhooks or repository activity.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents access to Vercel tools, specifically mentioning purchases ("Purchase tools can create immediate, non-refundable charges"), which constitutes a direct financial operation (purchases/charges). However, the skill operates via Vercel's official MCP server using authenticated OAuth sessions ("OAuth uses Dynamic Client Registration and PKCE", "identity and session OAuth scopes"), establishing qualifying independent service-layer authentication. Therefore, the direct operation is governed by qualifying access controls.