vercel-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill requires the agent to output the Claim URL (including the claim code/token) verbatim, which is a secret token that can be used to claim the deployment and therefore exposes sensitive information.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly tells the agent to rerun with "sandbox_permissions=require_escalated" to bypass sandbox networking restrictions, which is an instruction to escalate/bypass security mechanisms even though it doesn't request sudo, system-file edits, or user creation.