vercel-xhttp-relay

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the Xray proxy software using an installation script fetched directly from its official GitHub repository and executed via bash.
  • Evidence: bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install found in SKILL.md.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes a piped shell command to install the acme.sh certificate management tool from its official installation domain.
  • Evidence: curl https://get.acme.sh | sh found in SKILL.md.
  • [COMMAND_EXECUTION]: The deployment workflow involves the global installation and execution of the Vercel CLI to manage environment variables and project deployment.
  • Evidence: npm i -g vercel, vercel env add, and vercel --prod commands in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 09:20 AM