skills/openai/plugins/marketplace/Gen Agent Trust Hub

marketplace

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Official Vercel CLI Commands: The skill references standard vercel integration subcommands for discovering and managing third-party services. These are legitimate administrative tools for the Vercel platform.
  • API Interactions with Vercel: Instructions include curl requests to api.vercel.com for configuring log drains and verifying resource provisioning. These use the official platform API and follow recommended authentication flows.
  • Project Scaffolding: The skill suggests using npx create-vercel-integration and npx create-next-app to initialize new projects. These are well-known tools for Vercel development.
  • Environment Variable Best Practices: The skill describes the auto-provisioning of sensitive variables (e.g., POSTGRES_URL, STRIPE_SECRET_KEY) and correctly guides the user to use vercel env pull to synchronize them securely to a local file, adhering to secret management best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 05:55 AM
Security Audit — agent-trust-hub — marketplace