vercel-cli
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill involves executing the
vercel(orvc) command-line interface to manage deployments, environment variables, and project settings. These operations are standard for the intended use of managing Vercel projects. - External Dependencies: The documentation references the installation of the
vercelpackage vianpmand the use of@vercel/configvianpx. These are official tools provided by the vendor for project configuration and management. - Sensitive Data Management: The skill provides instructions for managing environment variables and authentication via
vercel loginandvercel env. While these involve sensitive information, the instructions follow official security practices, such as using OAuth device flows and write-only sensitive variables. - Data Interaction Surface: Commands like
vercel logsandvercel apiretrieve data from external Vercel services. As with any tool that processes external output, it is a best practice to treat retrieved logs or API responses as untrusted data before further processing.
Audit Metadata