pp-vercel-admin

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an example that embeds an auth token directly in a CLI command (vercel-admin-pp-cli auth set-token YOUR_TOKEN_HERE) and documents commands that can reveal decrypted env vars or deliver output to webhooks, which creates a realistic risk that an LLM/agent would be asked to include secret values verbatim in generated commands or outputs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and running remote code at runtime (npx install and go install), specifically the go install commands "go install github.com/mvanhorn/printing-press-library/library/cloud/vercel-admin/cmd/vercel-admin-pp-cli@latest" and "go install github.com/mvanhorn/printing-press-library/library/cloud/vercel-admin/cmd/vercel-admin-pp-mcp@latest", which fetch and execute remote code that the skill depends on.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill's command set includes explicit purchase operations: "vercel-admin-pp-cli billing buy-credits" (purchases credits using the default payment method on file) and registrar commands "registrar buy-domains" / "registrar buy-single-domain" (buy domains). These are specific, non-generic financial-execution actions that can move money.