vercel-deployment-password-gate
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a deployment protection gate with strong security defaults, including scrypt-based password hashing and constant-time comparisons for token verification.
- [SAFE]: Input sanitization is applied to the return path parameter to prevent open redirect vulnerabilities, and HTML escaping is used to protect the unlock form against cross-site scripting (XSS).
- [SAFE]: The build-time cleanup script (remove-proxy-on-prod.mjs) is restricted to specific files containing a managed marker and only executes during production builds on the Vercel platform to optimize deployment costs as documented.
- [SAFE]: All identified dependencies are restricted to standard Node.js built-ins and the well-known @vercel/functions package.
Audit Metadata