custom-metrics
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [Vendor Resource Usage]: The skill utilizes official Vercel resources, such as the
@vercel/functionsNode.js package and thevc(Vercel CLI) command-line interface. These are standard components provided by the platform author for the intended functionality. - [Data Privacy Guidance]: The documentation explicitly warns against including sensitive data—such as user IDs, request IDs, email addresses, or raw URLs—within metric tags. This guidance helps prevent accidental data exposure or exfiltration through telemetry channels.
- [Input Validation Patterns]: The skill includes configuration for command execution patterns that restrict metric names to a safe character set (alphanumeric, underscores, dots, and hyphens), which serves as a safeguard against potential command injection attempts.
Audit Metadata