vercel-advanced-troubleshooting

Warn

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: MEDIUMCREDENTIALS_UNSAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The evidence collection script located in references/evidence-collection-framework.md includes a command to capture Kubernetes secrets (kubectl get secret vercel-secrets -o yaml) and redirect them to a file named secrets-redacted.yaml. This filename is misleading, as the raw secret data is stored in the output YAML without actual redaction.
  • [PRIVILEGE_ESCALATION]: The reference file references/evidence-collection-framework.md describes the use of high-privilege diagnostic commands, including tcpdump for capturing network packets and journalctl/kubectl for accessing system-level logs and cluster-level configurations.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and execute various development utilities, including the autocannon load testing tool and Vercel's official debugging packages @vercel/nft and edge-runtime.
  • [COMMAND_EXECUTION]: The troubleshooting instructions involve executing standard command-line tools such as vercel, curl, and jq to inspect deployment states and interact with Vercel's management APIs.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 9, 2026, 03:49 AM