zeit
Warn
Audited by Socket on Apr 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities broadly match its stated purpose, and the CLI distribution path is consistent with the publisher. The main concern is data-flow integrity: ZEIT/Vercel API access and credential handling are mediated by Membrane rather than going directly to official Vercel endpoints, so users must trust a third-party auth broker and proxy with sensitive operational data.
Confidence: 87%Severity: 58%
Audit Metadata