vercel-connect
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Credential Management]: The skill facilitates the generation and use of OAuth tokens for third-party services. It emphasizes secure practices such as storing tokens in local variables and leveraging Vercel OIDC for authentication to prevent accidental exposure in logs or terminal history.
- [External Service Integration]: The skill enables interactions with well-known platforms like Slack and GitHub. These operations utilize official Vercel SDKs and target verified API endpoints, aligning with standard developer workflows for secure service integration.
- [Indirect Prompt Injection Surface]: The skill describes functionality for receiving and processing webhooks from external services. While this introduces an ingestion point for external data, the skill specifies the use of Vercel's OIDC verifier to ensure the authenticity and integrity of incoming requests before the agent processes them.
- [Command Execution]: The skill utilizes the Vercel CLI to manage connectors and obtain tokens. These commands are executed within a local project context to ensure proper configuration and minimize the need for manual setup.
Audit Metadata