vercel-blob
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the official
@vercel/blobpackage and utilizes standard Vercel environment tools (vercel env pull). These originate from a well-known service and are documented for their intended purpose. - [COMMAND_EXECUTION]: Instructions guide the user to execute
npm install @vercel/blobandvercel env pull .env.localto set up the development environment. These are standard development workflows. - [INDIRECT_PROMPT_INJECTION]: The skill implements file upload capabilities (avatars, PDFs, etc.). While this creates a surface where an agent might process untrusted external data, the skill includes explicit validation templates for file types and sizes, and uses standard Vercel security mechanisms like
handleUpload()to mitigate risks.
Audit Metadata