The Agent Skills Directory

Best Practice Guidance (CRON_SECRET): The skill provides instructions for securing public route targets by checking for an authorization header containing a CRON_SECRET environment variable. This is a standard security pattern for protecting webhooks or cron-triggered endpoints from unauthorized access.
Vendor Dependencies: The skill utilizes the @vercel/schedules package, which is the official library for managing scheduled tasks on the platform.
Private Function Targets: A significant portion of the guidance focuses on the use of private function targets (experimentalTriggers). This approach is highlighted as a security benefit because it prevents the function from being accessible via a public URL, thereby removing the need for manual secret management and reducing the potential attack surface.
Data Handling Surface: The skill describes the capability to pass JSON payloads (up to 8 KB) to scheduled tasks via the Schedules.create() method. Since these payloads are processed within the handler function, developers are encouraged to follow standard validation and sanitization practices for any data originating from external sources.

vercel-schedules