vercel-deployment
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource and architectural guide for Vercel deployments without executing dangerous commands or scripts.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill includes a dedicated 'Sharp Edges' section that correctly warns developers against using the
NEXT_PUBLIC_prefix for sensitive server-side secrets (e.g., Database URLs, Stripe Secret Keys) and provides safe alternatives. - [EXTERNAL_DOWNLOADS]: Mentions standard, well-known development tools and libraries such as
@next/bundle-analyzerandsharp. These references are provided in the context of build optimization and are typical for the described development workflow. - [COMMAND_EXECUTION]: The shell commands mentioned (e.g.,
npm install,npx @next/bundle-analyzer) are common development tasks associated with the official Next.js and Vercel ecosystems and do not involve suspicious remote script execution.
Audit Metadata