vercel-cli-with-tokens

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill ensures the Vercel CLI is present by running npm install -g vercel.
  • [DATA_EXFILTRATION]: Accesses environment variables and local .env files to retrieve the VERCEL_TOKEN. This is the intended functional purpose of the skill for authentication with Vercel's official services.
  • [COMMAND_EXECUTION]: Performs deployment and administrative operations using the Vercel CLI, including vercel deploy, vercel link, and vercel env. The instructions correctly emphasize security by advising against passing secrets via CLI flags, which prevents exposure in shell history and process listings.
  • [COMMAND_EXECUTION]: Integrates with the Stripe CLI (stripe projects) to manage subscription plans for Vercel projects. It includes a specific working agreement to seek user approval before initiating any paid or destructive changes.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests content from local .env files and environment variables. While these are external data sources, the skill uses them solely for parameter extraction (e.g., tokens and project IDs) and does not use them in a way that allows for instruction injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 11:59 AM