vercel-plugin-eval
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Monitoring Local Application Logs: The skill accesses and parses logs located in
~/.claude/debug/. This is used to verify that the plugin hooks are firing correctly and to monitor the execution flow during testing sessions. - Remote Plugin Installation: The skill uses
npxto fetch thevercel-plugindirectly from its official GitHub repository (https://github.com/vercel/vercel-plugin). This ensures the latest version is used for evaluation. - Shell Automation and Tool Execution: The instructions include bash commands for directory management, process spawning via WezTerm, and log analysis using standard utilities like
grepandfind. These are used to automate the evaluation workflow and generate coverage reports. - Testing Environment Configuration: The skill specifies a dedicated testing directory (
~/dev/vercel-plugin-testing/) to isolate evaluation activities from other development projects.
Audit Metadata