The Agent Skills Directory

External Package Dependencies: The skill involves the installation of the @vercel/microfrontends package across multiple package managers (npm, pnpm, bun, yarn). These packages originate from a well-known service provider and are integral to the skill's primary purpose of managing microfrontends.
Command Execution via CLI: The skill documentation references the vercel microfrontends (or vercel mf) CLI tool. This tool is used for group management (creating, adding, removing, and deleting groups) and local development proxy operations. These commands are standard for the described workflow and include appropriate user confirmation prompts for destructive actions.
Local Development Proxy: The microfrontends proxy command facilitates local routing between development servers and production fallbacks. While this involves network operations, it is a documented feature for development environments and includes security considerations like deployment protection bypass secrets.
Credential Handling Recommendations: The skill provides guidance on using VERCEL_AUTOMATION_BYPASS_SECRET to access protected deployments during local development. It correctly advises storing these in .env.local files or as Vercel Shared Environment Variables, which aligns with industry best practices for secret management.
Indirect Prompt Injection Surface: As the skill processes microfrontends.json configuration files and interpolates values into CLI commands, there is a theoretical surface for indirect prompt injection if an attacker were to provide a malicious configuration file. However, the skill includes schema validation pointers and the risk is considered low within the context of developer tools.

microfrontends