env-vars
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [Environment Variable Management]: The skill provides comprehensive instructions for using the Vercel CLI (
vercel env) to manage project configuration. It emphasizes security best practices, such as excluding secret files (.env.local) from version control to prevent credential exposure. - [Secret Exposure Prevention]: The instructions include clear warnings about the
NEXT_PUBLIC_prefix, which exposes variables to the browser bundle, helping developers avoid accidental disclosure of sensitive server-side secrets. - [Dependency Usage]: The skill references established packages such as
dotenv-cliand@vercel/oidc. These are standard tools within the Vercel and Next.js ecosystems used for environment management and secure authentication. - [Shell Scripting Patterns]: The provided shell snippets for loading environment variables and verifying configurations are common development patterns. They are used here to facilitate local development workflows without introducing unnecessary risk.
Audit Metadata