access-protected-vercel-deployment
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Use of Official CLI Tooling: The skill provides instructions for using
vercel curl(vc curl) and the Vercel CLI to access protected resources. These are standard, vendor-provided tools for managing Vercel environments. - Secure Secret Management: The instructions explicitly include security best practices, such as warning the agent not to print sensitive tokens like
VERCEL_OIDC_TOKENto logs, paste them into code, or commit them to version control. - Shell Command Implementation: The skill includes shell command patterns for browser automation (
agent-browser) and environment variable management (vc env run). These commands follow safe patterns, such as usingsh -cto pass arguments to browser tools rather than direct string interpolation. - Trusted Domain Interaction: All external documentation links and resource patterns target
vercel.comor*.vercel.app, which are consistent with the skill's stated purpose and the author's identity.
Audit Metadata