bootstrap
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution for Project Setup:
- The skill executes several shell commands to automate the development environment setup. This includes using the Vercel CLI (
vercel link,vercel env pull,vercel env add) to synchronize configuration and managing database operations via repository-defined scripts (npm run db:push). These are typical operations for a bootstrapping utility. - External Resource Integration:
- The skill references and downloads components using
npx shadcn@latest add, which is a common practice for initializing UI foundations in Next.js projects. It also interacts with the Vercel platform to provision integrations like Neon Postgres, which is expected behavior for an orchestrator focusing on Vercel-linked resources. - Environment Variable Management:
- There is a clear security consideration regarding the handling of sensitive environment variables. The skill generates an
AUTH_SECRETand stores it directly in the Vercel environment without printing it to the console, following best practices for secret management. It also compares environment templates with local files to ensure required keys are present without exposing their values.
Audit Metadata