env-vars

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Environment Variable Management: The skill provides detailed instructions on using the Vercel CLI to manage sensitive configuration. It emphasizes security best practices, such as excluding secrets from version control and using environment-specific scoping.
  • Dynamic Command Execution: The skill includes bash scripts for local project setup and environment variable loading. One example uses source with a process substitution (<(grep...)) to load variables into the shell session. While this pattern dynamically generates and executes commands based on the content of .env files, it is a recognized technique for shell-based environment management during local development.
  • Dependency Management: The skill references standard Node.js packages such as @vercel/oidc and dotenv-cli. These are well-known tools within the Vercel and JavaScript ecosystems used for their intended purposes of authentication and configuration management.
  • Data Ingestion and Processing: The skill suggests automated flows for comparing .env.example with .env.local. This involves reading and processing local file content to verify project configuration, which is a standard part of a developer's bootstrap workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 06:29 PM