vercel-blob
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The main instruction file SKILL.md proactively identifies and provides mitigations for common security pitfalls, such as the accidental exposure of the BLOB_READ_WRITE_TOKEN to client-side code.
- [SAFE]: The skill uses standard, well-known Node.js packages from the Vercel ecosystem (@vercel/blob) and Next.js, with no suspicious or unverifiable dependencies detected.
- [SAFE]: Provided code templates for file management and uploading correctly demonstrate the use of server-side validation and secure token handling (e.g., presigned URLs via handleUpload).
- [SAFE]: No malicious patterns such as obfuscation, credential exfiltration, or unauthorized command execution were found in the skill's files or scripts.
Audit Metadata