vercel
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution] (SAFE): The skill documents standard usage of the
vercelCLI for project management and deployment. - [Data Exposure] (LOW): The
vercel env pullandvercel env lscommands interact with sensitive environment variables. This is expected behavior for a deployment tool but highlights the need for a secure execution environment. - [Indirect Prompt Injection] (LOW):
- Ingestion points: Deployment logs and project metadata retrieved via
vercel logsorvercel inspectcould contain untrusted content. - Boundary markers: None present.
- Capability inventory: Significant (can delete projects, manage domains, and perform production deployments).
- Sanitization: None specified.
Audit Metadata