vercel-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate code templates and architectural patterns for Vercel API integration. No instances of prompt injection, obfuscation, or unauthorized command execution were found.
- [CREDENTIALS_UNSAFE]: The code correctly recommends using
process.env.VERCEL_API_KEYfor secret management and avoids hardcoding sensitive tokens within the code snippets. - [DATA_EXFILTRATION]: Network operations are scoped to the official Vercel API domain (
api.vercel.com), which is a well-known service. No patterns of data exfiltration to unauthorized third-party servers were detected. - [DYNAMIC_EXECUTION]: The skill focuses on static code patterns and does not employ unsafe dynamic execution methods like
eval()orexec()with untrusted input.
Audit Metadata