vercel-optimize@r1
VERIFIEDVerified PublisherPublisher claims: "Use for Vercel cost and performance optimization on deployed projects, especially Next.js, SvelteKit, Nuxt, and limited Astro apps. Collect Vercel metrics, usage, project config, and code scan results first; investigate only metric-backed candidates; produce ranked recommendations grounded in verified files and version-aware Vercel/framework docs. Trigger for Vercel bill reduction, slow or expensive routes, caching opportunities, Function Invocations, Build Minutes, Fast Data Transfer, Core Web Vitals, Bot Management, Fluid compute, or cost breakdown requests." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry skills.shPublisher vercel-labs · verified orgInstalls 108KLast detonated 29 h ago
$npx skills add vercel-optimize
Report an issueBehavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Instructs the agent to modify its persistent memory or instruction filesAGENTS.md:42 · Instructs the agent to modify its persistent memory or instruction files
AST01HIGH
npx invocation of non-well-known packageAGENTS.md:32 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:14 · npx invocation of non-well-known package — may execute untrusted code
AST06LOW
Unpinned dependencyREADME.md:22 · Unpinned dependency
AST06MEDIUM
File type combined with upload actionSKILL.md:254 · File type combined with upload action — agent may exfiltrate local data files
AST07