vercel-cli

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the Vercel CLI and helper utilities like turbo-ignore via the Bun package manager from well-known official registries.
  • [COMMAND_EXECUTION]: Uses various Vercel CLI commands to deploy applications, manage domains, and view deployment logs. It also utilizes standard shell utilities like source, echo, and while loops for automation tasks.
  • [CREDENTIALS_UNSAFE]: Accesses sensitive local files such as .env.local and project configuration in .vercel/project.json to synchronize secrets and project metadata with the Vercel platform. It also references the use of VERCEL_TOKEN for authenticated CI/CD operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 12:10 AM