vercel-cli-with-tokens
Enables deployment and management of Vercel projects using token-based authentication for streamlined CLI operations.
Install this skill
Security score
The vercel-cli-with-tokens skill was audited on Jun 10, 2026 and we found 20 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 22 | ```bash |
Template literal with variable interpolation in command context
| 51 | ```bash |
Template literal with variable interpolation in command context
| 65 | ```bash |
Template literal with variable interpolation in command context
| 78 | ```bash |
Access to .env file
| 28 | ### B) Token is in a `.env` file under `VERCEL_TOKEN` |
Access to .env file
| 31 | grep -q '^VERCEL_TOKEN=' .env 2>/dev/null && printf 'VERCEL_TOKEN is present in .env\n' |
Access to .env file
| 37 | VERCEL_TOKEN="$(sed -n 's/^VERCEL_TOKEN=//p' .env | tail -n 1)" |
Access to .env file
| 41 | ### C) Token is in a `.env` file under a different name |
Access to .env file
| 46 | grep -Eio '^[A-Z0-9_]*VERCEL[A-Z0-9_]*(?==)' .env 2>/dev/null |
Access to .env file
| 53 | VERCEL_TOKEN="$(sed -n "s/^${vercel_var}=//p" .env | tail -n 1)" |
Access to .env file
| 83 | # Or check .env |
Access to .env file
| 84 | grep -Eio '^[A-Z0-9_]*VERCEL[A-Z0-9_]*(?==)' .env 2>/dev/null |
Access to .env file
| 250 | # Pull env vars to local .env.local file |
Access to .env file
| 308 | - **Check the environment for tokens before asking the user.** Look in the current env and `.env` files first. |
Access to .env file
| 320 | Check the environment and any `.env` files present: |
Access to .env file
| 324 | grep -Eio '^[A-Z0-9_]*VERCEL[A-Z0-9_]*(?==)' .env 2>/dev/null |
External URL reference
| 87 | **If you have a project URL** (e.g. `https://vercel.com/my-team/my-project`), extract the team slug: |
External URL reference
| 90 | # e.g. "my-team" from "https://vercel.com/my-team/my-project" |
External URL reference
| 91 | echo "$PROJECT_URL" | sed 's|https://vercel.com/||' | cut -d/ -f1 |
External URL reference
| 303 | Full details: https://vercel.com/docs/plans/pro-plan |