vercel-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and command-line examples for managing Vercel deployments. It adheres to security best practices by recommending the use of environment variables for sensitive credentials (e.g., $VERCEL_TOKEN).
- [SAFE]: External network operations are limited to well-known and official services, specifically the Vercel API (api.vercel.com) and the Vercel status page (www.vercel-status.com).
- [INDIRECT_PROMPT_INJECTION]: The skill functions by processing output from external CLI tools and API health checks, which constitutes a standard ingestion surface for monitoring and deployment assistants.
- Ingestion points: Command output from
curlhealth checks andvercelCLI status commands inSKILL.mdandreferences/implementation.md. - Boundary markers: None explicitly defined in the provided command examples.
- Capability inventory: The skill manifest restricts tool usage to
Bash(vercel:*),Bash(curl:*),Read, andGrep. - Sanitization: Employs standard tools like
jqandgrepto filter and process external data.
Audit Metadata