vercel-automation
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data and provides access to sensitive platform management tools.
- Ingestion points: The tools
VERCEL_GET_DEPLOYMENT_LOGSandVERCEL_GET_RUNTIME_LOGS(SKILL.md) ingest external log content that could contain malicious instructions. - Boundary markers: The skill does not provide explicit delimiters or instructions for the agent to ignore commands embedded within the log content.
- Capability inventory: High-privilege tools are available, including
VERCEL_CREATE_DNS_RECORD,VERCEL_ADD_ENVIRONMENT_VARIABLE, andVERCEL_UPDATE_PROJECT(SKILL.md). - Sanitization: No validation or sanitization of external data is performed before it enters the agent's context.
- [EXTERNAL_DOWNLOADS]: The skill requires connection to an external service endpoint for tool execution.
- Evidence: Setup instructions require adding
https://rube.app/mcpas an MCP server (SKILL.md). This is a functional reference for the Rube MCP platform.
Audit Metadata