deploy-vercel
Offers detailed guidelines for deploying Next.js applications on Vercel, focusing on best practices and serverless architecture.
Install this skill
Security score
The deploy-vercel skill was audited on Feb 9, 2026 and we found 31 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 120 | ```bash |
Template literal with variable interpolation in command context
| 422 | if (authHeader !== `Bearer ${process.env.CRON_SECRET}`) { |
Template literal with variable interpolation in command context
| 540 | const key = `ratelimit:${ip}` |
Webhook reference - potential data exfiltration
| 143 | STRIPE_WEBHOOK_SECRET=whsec_... |
Access to .env file
| 17 | - [ ] `.gitignore` includes `.env`, `.vercel`, `node_modules` |
Access to .env file
| 115 | vercel env pull .env.local |
Access to .env file
| 331 | connectionString: process.env.POSTGRES_URL, |
Access to .env file
| 352 | if (process.env.NODE_ENV !== 'production') globalForPrisma.prisma = prisma |
Access to .env file
| 383 | process.env.NEXT_PUBLIC_SUPABASE_URL!, |
Access to .env file
| 384 | process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY! |
Access to .env file
| 422 | if (authHeader !== `Bearer ${process.env.CRON_SECRET}`) { |
Access to .env file
| 574 | token: process.env.BLOB_READ_WRITE_TOKEN, |
Access to .env file
| 643 | dsn: process.env.NEXT_PUBLIC_SENTRY_DSN, |
Access to .env file
| 644 | environment: process.env.VERCEL_ENV, |
Access to .env file
| 739 | enabled: process.env.ANALYZE === 'true', |
Access to .env file
| 784 | apiUrl: process.env.VERCEL_ENV === 'production' |
Access to .env file
| 786 | : process.env.VERCEL_ENV === 'preview' |
External URL reference
| 35 | 1. Go to [vercel.com](https://vercel.com) |
External URL reference
| 126 | NEXT_PUBLIC_SITE_URL=https://yourdomain.com |
External URL reference
| 127 | NEXTAUTH_URL=https://yourdomain.com |
External URL reference
| 137 | NEXT_PUBLIC_SUPABASE_URL=https://xxx.supabase.co |
External URL reference
| 151 | KV_REST_API_URL=https://... |
External URL reference
| 156 | EDGE_CONFIG=https://edge-config.vercel.com/... |
External URL reference
| 785 | ? 'https://api.yourdomain.com' |
External URL reference
| 787 | ? 'https://api-staging.yourdomain.com' |
External URL reference
| 788 | : 'http://localhost:3001', |
External URL reference
| 884 | - [Vercel Documentation](https://vercel.com/docs) |
External URL reference
| 885 | - [Next.js Documentation](https://nextjs.org/docs) |
External URL reference
| 886 | - [Vercel CLI Reference](https://vercel.com/docs/cli) |
External URL reference
| 887 | - [Edge Functions](https://vercel.com/docs/functions/edge-functions) |
External URL reference
| 888 | - [Serverless Functions](https://vercel.com/docs/functions/serverless-functions) |