subscription-store

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Resource Fetching: The skill retrieves lesson content from official Vercel documentation domains (vercel.com). This is a standard mechanism to provide up-to-date course material to the user.
  • Starter Repository Reference: Instructions include cloning a starter template from Vercel's official GitHub organization. Using established repositories from well-known organizations is a routine practice in software development education.
  • Environment Variable Configuration: The skill guides users to store sensitive keys (Stripe and Supabase credentials) in a .env.local file. This is a recommended security practice for local development to prevent secrets from being hardcoded or committed to version control.
  • Indirect Prompt Injection Surface: By fetching and processing remote markdown content from the Academy course, the skill has an ingestion surface for external data. While theoretically vulnerable to indirect injection if the source were compromised, the risk is mitigated by targeting official, trusted infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 12:50 AM