vercel-cli-with-tokens
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'vercel' package from the public NPM registry, which is a well-known technology service.
- [COMMAND_EXECUTION]: The skill uses standard Vercel, Git, and NPM CLI commands to perform project deployments and environment variable management.
- [CREDENTIALS_UNSAFE]: The skill accesses local .env files to retrieve the VERCEL_TOKEN for non-interactive authentication. It includes explicit warnings and best practices to ensure tokens are handled securely via environment variables rather than insecure command-line arguments.
Audit Metadata