vercel-ci-setup
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- Official CLI Tooling: The skill relies on the established
vercelandgh(GitHub) CLI tools for all operations, including project inspection, repository setting updates, and pull request creation. These are standard tools for interacting with the respective platforms. - Read-Only Discovery: The task discovery phase is explicitly designed to be read-only, inspecting configuration files (
turbo.json,package.json,.github/workflows/) without executing arbitrary scripts or installing dependencies prematurely. - Least Privilege Task Selection: The skill prioritizes 'low-dependency' tasks such as linting and type-checking that do not require secrets, environment variables, or external network access, reducing the risk of accidental exposure during initial CI setup.
- Secure Credential Handling: The skill assumes the presence of authenticated CLI sessions (
vercel login,gh auth login) and does not request or store raw credentials or API keys. - Controlled State Changes: Vercel CI enablement is performed only after the configuration branch is pushed, and the skill includes logic to roll back the enablement state if the subsequent pull request creation fails.
Audit Metadata