vercel-agent-vercel-cli-with-tokens
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes a dedicated "Stripe Projects Plan Changes" section with explicit Stripe CLI commands (e.g.,
stripe projects add vercel/pro,stripe projects upgrade vercel-plan pro,stripe projects downgrade vercel-plan hobby) that perform paid plan upgrades/downgrades and can bill a real card. These are specific payment-gateway operations (Stripe) capable of causing financial transactions/charges, not mere generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata