vercel-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides comprehensive documentation and command-line examples for managing Vercel deployments. It adheres to security best practices by recommending the use of environment variables for sensitive credentials (e.g., $VERCEL_TOKEN).
  • [SAFE]: External network operations are limited to well-known and official services, specifically the Vercel API (api.vercel.com) and the Vercel status page (www.vercel-status.com).
  • [INDIRECT_PROMPT_INJECTION]: The skill functions by processing output from external CLI tools and API health checks, which constitutes a standard ingestion surface for monitoring and deployment assistants.
  • Ingestion points: Command output from curl health checks and vercel CLI status commands in SKILL.md and references/implementation.md.
  • Boundary markers: None explicitly defined in the provided command examples.
  • Capability inventory: The skill manifest restricts tool usage to Bash(vercel:*), Bash(curl:*), Read, and Grep.
  • Sanitization: Employs standard tools like jq and grep to filter and process external data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM