skills/openai/plugins/env-vars/Gen Agent Trust Hub

env-vars

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [Environment Variable Management]: The skill provides comprehensive instructions for using the Vercel CLI (vercel env) to manage project configuration. It emphasizes security best practices, such as excluding secret files (.env.local) from version control to prevent credential exposure.
  • [Secret Exposure Prevention]: The instructions include clear warnings about the NEXT_PUBLIC_ prefix, which exposes variables to the browser bundle, helping developers avoid accidental disclosure of sensitive server-side secrets.
  • [Dependency Usage]: The skill references established packages such as dotenv-cli and @vercel/oidc. These are standard tools within the Vercel and Next.js ecosystems used for environment management and secure authentication.
  • [Shell Scripting Patterns]: The provided shell snippets for loading environment variables and verifying configurations are common development patterns. They are used here to facilitate local development workflows without introducing unnecessary risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 02:50 AM