tanstack-start-netlify-to-vercel

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • Command Execution: The skill utilizes a provided bash script (scripts/audit.sh) to audit the project's filesystem for Netlify configurations. This is a read-only operation intended to guide the migration process. It also makes use of the Vercel CLI for environment variable management and deployment tasks.
  • External Downloads: The skill recommends installing official packages such as nitro, @vercel/blob, and @vercel/queue from the npm registry. These are standard, well-known dependencies for TanStack and Vercel environments.
  • Secure Credentials Handling: The instructions include a strong security guardrail, explicitly forbidding the agent from handling, asking for, or storing user secrets or environment variable values. This ensures that sensitive information remains under the user's control through official Vercel tools and dashboards.
  • Data Processing: The skill performs an audit of local project files (like package.json and vite.config.ts) to detect Netlify-specific imports and configurations. This analysis is used solely to generate a migration checklist and does not involve sending data to unauthorized external sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 02:54 AM
Security Audit — agent-trust-hub — tanstack-start-netlify-to-vercel