vercel-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of deployment patterns and security best practices for Vercel and Next.js. It does not contain executable scripts or commands that pose a risk to the host environment.
- [DATA_EXPOSURE]: The skill includes examples of environment variables such as 'NEXT_PUBLIC_SUPABASE_ANON_KEY' and 'SUPABASE_SERVICE_ROLE_KEY'. However, these are clearly identified as placeholders ('eyJ...') within an educational context aimed at teaching users how to correctly manage secrets and avoid accidental exposure.
- [COMMAND_EXECUTION]: References to 'npm install' and 'npx' are limited to standard development tools like '@next/bundle-analyzer', which is consistent with the skill's purpose of build optimization.
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected.
Audit Metadata