skills/jeremylongshore/claude-code-plugins-plus-skills/vercel-deploy-integration/Gen Agent Trust Hub
vercel-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure configuration practices by utilizing environment variables (e.g., $VERCEL_API_KEY) and platform-specific secret management tools (e.g., gcloud secrets) rather than hardcoding sensitive data. The use of placeholders like 'sk_live_***' is clearly for illustrative purposes.
- [SAFE]: All shell commands and CLI tools specified (vercel, fly, gcloud) are consistent with the skill's primary objective of managing production deployments. No suspicious subprocess calls or command injection vulnerabilities were detected.
- [SAFE]: References and external documentation links target official, well-known service providers including Vercel, Fly.io, and Google Cloud. No unverifiable third-party dependencies or remote script execution patterns are present.
- [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were found across the skill files.
Audit Metadata