vercel-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard Vercel security features and configurations and does not contain malicious code or unauthorized data access patterns.
- [EXTERNAL_DOWNLOADS]: Communicates with the official Vercel API (api.vercel.com) for project and environment management, which is a well-known and trusted service.
- [INDIRECT_PROMPT_INJECTION]: The skill involves reading and writing project configuration files (like vercel.json) and environment variables. While this presents a potential ingestion surface for data that could influence agent behavior, the risk is inherent to the skill's purpose of managing deployment settings and is mitigated by the specific scope of the Vercel CLI tools used. 1. Ingestion points: Vercel configuration files and environment variable data via the Vercel CLI. 2. Boundary markers: Not explicitly defined for these operations. 3. Capability inventory: Write, Edit, and Bash(vercel:*) tools for modifying project state. 4. Sanitization: Standard shell execution via the Vercel CLI handles parameter passing.
Audit Metadata