vercel-cli-with-tokens
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions fetching workflows from the official Vercel Labs repository and instructs the installation of the
vercelCLI package vianpm. These references target a well-known service and are standard for the skill's operation.\n- [COMMAND_EXECUTION]: The skill uses various shell commands includingvercel,git, andstripeto perform project management tasks. All commands are relevant to the stated purpose of the skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external project data and environment variables.\n - Ingestion points: Reads project configuration from
.vercel/project.json,.vercel/repo.json, environment variables, and git metadata.\n - Boundary markers: Includes explicit instructions to avoid printing secret values and to stop if authentication is missing.\n
- Capability inventory: Can perform deployments, manage environment variables, and configure domains via CLI tools.\n
- Sanitization: Relies on standard CLI tool behavior and provides strict guidance against insecure secret handling.
Audit Metadata