Scanned skills

vercel-labs/agent-skills vercel-optimize

Checked the catalogued skill at vercel-optimize.

SkillTrust corpus scan 14 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 149
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 149
permission_hygienehigh SD-003
lib/investigation-brief.mjs
permission_hygienehigh SD-003
lib/repo-root.mjs
securityhigh SD-007
lib/scanners/cache-components-suspense-dedupe.mjs
securityhigh SD-007
lib/scanners/cache-components-suspense-dedupe.mjs
securityhigh SD-007
lib/scanners/cache-components-suspense-dedupe.mjs
securityhigh SD-007
lib/scanners/cache-components-suspense-dedupe.mjs
securityhigh SD-007
lib/scanners/edge-heavy-import.mjs
securityhigh SD-007
lib/scanners/edge-heavy-import.mjs
securityhigh SD-007
lib/scanners/force-dynamic.mjs
securityhigh SD-007
lib/scanners/headers-in-page.mjs
10 suppressed by AI triage
securityhigh SD-007 benign_example
lib/gates/cwv-poor.mjs

Comment references a documentation URL, not an executable network call.

securityhigh SD-007 benign_example
lib/gates/cwv-poor.mjs

sourceCitation contains a URL but does not initiate any network request.

securityhigh SD-007 benign_example
lib/gates/isr-overrevalidation.mjs

The file only contains a static documentation URL in metadata; no outbound network call is executed or authorized.

securityhigh SD-007 benign_example
lib/gates/middleware-heavy.mjs

URL appears only as a documentation reference, not an executable network call.

securityhigh SD-007 benign_example
lib/grade-recommendation.mjs

The matched pattern is a regular expression definition, not an actual network call or permission grant, thus not a real threat.

securityhigh SD-007 benign_example
lib/investigation-brief.mjs

The code only generates documentation hints and contains no real outbound network calls.

securityhigh SD-007 benign_example
lib/sanitizers/rate-limit.mjs

Only a documentation URL, no outbound request or permission grant.

securityhigh SD-007 benign_example
lib/sanitizers/rate-limit.mjs

Only a documentation URL, no outbound request or permission grant.

securityhigh SD-007 benign_example
lib/sanitizers/rate-limit.mjs

Only a documentation URL, no outbound request or permission grant.

securityhigh SD-007 benign_example
lib/sanitizers/rate-limit.mjs

Only a documentation URL, no outbound request or permission grant.