fix-vercel-build
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of Vercel build logs to drive automated code modifications and commits.
- Ingestion points: Build logs are retrieved from Vercel's environment (SKILL.md).
- Boundary markers: None specified in the instructions to distinguish between logs and embedded instructions.
- Capability inventory: The skill has permissions to read affected files, apply source code fixes, and commit changes to the repository (SKILL.md).
- Sanitization: No sanitization or validation of the log content is described before using it to inform code changes.
Audit Metadata