vercel-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes documentation for processing Vercel API responses using tools like
jq, creating a potential ingestion point for data within the agent's context. As the data source is the user's own authorized Vercel account and the functionality is central to the skill's management purpose, this is documented as a standard operational pattern without security risk. - Ingestion points: API response output in
SKILL.md(Step 2 and Step 6). - Boundary markers: No specific delimiters are implemented in the shell examples.
- Capability inventory: The skill is configured with
Bash(curl:*),Read,Write, andEditcapabilities. - Sanitization: Data is structured via
jq, though no explicit prompt injection sanitization is present in the examples. - [SAFE]: The skill utilizes environment variables such as
$VERCEL_TOKENandprocess.env.SAML_CERTfor authentication, which is a secure and standard practice. - [SAFE]: External references to
jeremylongshore.com,intentsolutions.io, andtonsofskills.comare legitimate vendor-owned resources that align with the skill's author context.
Audit Metadata