use-vercel-deploy-in-monorepo
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local CLI tools for build and deployment workflows, including
vercel,pnpm,turbo,nitro, andnuxi. These operations are limited to project management and are standard for the described purpose. - [EXTERNAL_DOWNLOADS]: The skill facilitates interaction with the Vercel platform by utilizing the Vercel CLI and package managers to install framework-specific dependencies. These communications target well-known, trusted services.
- [DATA_EXFILTRATION]: The skill provides instructions for managing the
VERCEL_TOKENand project settings. It includes specific safety guidelines to ensure secrets are handled via environment variables and are never printed to logs or user-facing outputs. - [PROMPT_INJECTION]: The skill involves reading project configuration files (e.g.,
package.json,.vercel/project.json) and Vercel API responses, which represent a surface for indirect prompt injection. The skill mitigates this risk by requiring strict identifier verification and field-level comparison between local state and remote API data.
Audit Metadata