vercel-policy-guardrails
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard security best practices for Vercel applications by providing templates for linting and policy enforcement.
- [SAFE]: The pre-commit hook script scans staged files for potential credentials (such as
VERCEL_TOKENor Stripe live keys) using predefined regex patterns, which is a defensive security measure. - [SAFE]: The CI/CD checks validate
vercel.jsonfor deprecated properties and hardcoded secrets, improving the reliability and security of the deployment pipeline. - [SAFE]: The custom ESLint rules are designed to prevent the use of
NEXT_PUBLIC_prefixes on sensitive environment variables, reducing the risk of accidental secret exposure in client-side bundles. - [SAFE]: All identified external references and packages (e.g.,
husky) are well-known tools or belong to the skill's author, posing no risk to the user's environment.
Audit Metadata