vercel-cli-with-tokens
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Vercel CLI from the official npm registry during the setup process.
- [COMMAND_EXECUTION]: Executes Vercel and git commands to manage deployment workflows, environment configuration, and project state.
- [DATA_EXFILTRATION]: Accesses the project's local
.envfile and environment variables to retrieve theVERCEL_TOKENand project identifiers. This access is required for the skill's primary functionality of authenticated CLI management. - [PROMPT_INJECTION]: Identifies a potential surface for indirect prompt injection through the ingestion of untrusted data from local configuration files and git metadata.
- Ingestion points:
.env,package.json,.vercel/project.json, and git remote configurations. - Boundary markers: Absent.
- Capability inventory:
npm install,vercel deploy,git push,vercel env add, andvercel domains add. - Sanitization: No explicit sanitization or validation of the ingested file content was detected.
Audit Metadata