·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 20. Classified findings closed: 0. Classified findings remaining: 20. Unclassified scanner findings remaining: 1. Review findings closed: 1. Review findings remaining: 20.
5
13
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
lib/support-topics.mjs | System Prompt / Instruction Leakage | — | High | Open | |
SKILL.md | Obfuscation & Evasion | Trigger-based activation | High | Open | |
lib/vercel.mjs | Malicious Code & Command Execution | Command injection | High | Open | |
references/scanner-patterns.md | Malicious / Backdoor Behavior | Known malware signature | High | Open | |
lib/scanners/force-dynamic.mjs | Malicious / Backdoor Behavior | Known malware signature | High | Open | |
lib/investigation-brief.mjs | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
SKILL.md | Tool & MCP Manipulation | MCP over-permissioning | Medium | Open | |
AGENTS.md | Supply Chain & Install-Time Trust | — | Medium | Open |
20 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/vercel-labs/skills/vercel-optimize:latest
MIT
HARDENING.md