vercel-queues
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the Vercel CLI and the
@vercel/queueSDK. Both are official tools provided by Vercel, a well-known service provider. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing queue messages, which represents a surface for ingesting untrusted data. This is the primary and intended function of the skill.
- Ingestion points: Data enters the agent context through the
handleCallbackfunction (push mode) and thereceivemethod (poll mode) as shown inreferences/quickstart.mdandreferences/poll-mode.md. - Boundary markers: The provided code templates do not include specific delimiters or instructions to ignore embedded commands within the message payload.
- Capability inventory: The skill facilitates queue operations including sending messages, receiving payloads, and acknowledging processing completion via the
@vercel/queueSDK. - Sanitization: The reference implementation suggests direct processing of the message payload; application-level validation and sanitization are left to the developer.
- [CREDENTIALS_UNSAFE]: The documentation correctly recommends using
vc env pullto manage secrets via environment variables. This is a secure alternative to hardcoding credentials and aligns with standard industry practices.
Audit Metadata