vercel-known-pitfalls
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practices guide and audit template for Vercel-based projects. It aims to improve security posture by identifying common anti-patterns such as hardcoded credentials and improperly scoped environment variables.
- [COMMAND_EXECUTION]: Includes a 'Quick Audit Script' using standard utilities like
grepandjq. These commands are intended for local codebase analysis to find specific patterns of misconfiguration or data leakage. - [CREDENTIALS_UNSAFE]: While the skill contains regex patterns for detecting secrets (e.g.,
sk_live,Bearertokens), these are provided as defensive detection logic rather than hardcoded credentials. It explicitly instructs the user on how to remediate secret exposure by using environment variables and rotating compromised keys.
Audit Metadata