CtrlK
BlogDocsLog inGet started
Tessl Logo

access-protected-vercel-deployment

Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection. Use when curl, agent-browser, Playwright, or another automated request reaches a Vercel login or protection page; when a protected preview or production URL returns 401 or 403; when TRUSTED_SOURCES_ENVIRONMENT_MISMATCH appears; or when choosing between `vercel curl` and the `x-vercel-trusted-oidc-idp-token` header.

72

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An actionable, well-structured skill body with executable commands, explicit validation checkpoints, and clear error-recovery guidance. Minor trimming of interpretive prose and confirmation that the self-contained scope is intentional would push it higher.

Suggestions

Tighten the "Diagnose the response" and "Trusted Sources rules" prose to checklist-style bullets to improve token efficiency.

Add an explicit 'verify the request now succeeds' checkpoint after the `vc curl` / header-injection steps to close the validation loop explicitly.

DimensionReasoningScore

Conciseness

Mostly lean and instruction-dense with no padding about general concepts, but a few interpretive sentences (e.g., the "Diagnose the response" and Trusted Sources explanatory prose) could be trimmed slightly tighter.

4 / 5

Actionability

Fully executable, copy-paste-ready commands cover the common cases: `vc curl` variants, `vc whoami`, `vc env run` with agent-browser header injection, and `vc env pull`, plus the exact header value to set.

5 / 5

Workflow Clarity

Clear access-path selection (HTTP vs browser) with explicit validation checkpoints (`vc whoami`, inspecting `.vercel/project.json`, obtain authorization before access-control changes) and a "Diagnose the response" feedback loop mapping response signals to corrective action.

5 / 5

Progressive Disclosure

Well-organized into clear sections (access path, Trusted Sources, diagnose, avoid, related skills) with a one-level "Related skills" pointer, and the focused single-file scope is appropriate with no bundle files needed, though it runs longer than the simple-skill threshold.

4 / 5

Total

18

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, trigger-rich description that clearly scopes a Vercel-specific niche and answers both what and when with concrete, natural trigger phrases. The only minor weakness is that the primary verbs (access, test) are generic relative to a fully enumerated action set.

DimensionReasoningScore

Specificity

Names the domain and concrete actions ("Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection") plus a concrete choice between `vercel curl` and the `x-vercel-trusted-oidc-idp-token` header, but the two verbs (access, test) are somewhat generic, leaving minor coverage gaps versus a fully enumerated action list.

4 / 5

Completeness

Explicitly answers both what ("Access and test Vercel deployments protected by...") and when via a multi-clause "Use when..." trigger list naming the protection page, 401/403 responses, and the specific error string.

5 / 5

Trigger Term Quality

Comprehensive natural-term coverage including tool names ("curl, agent-browser, Playwright"), status codes ("401 or 403"), the literal error string ("TRUSTED_SOURCES_ENVIRONMENT_MISMATCH"), and the exact header name that a user would encounter.

5 / 5

Distinctiveness Conflict Risk

Narrow Vercel-specific niche with distinctive triggers (Vercel Authentication/SSO/Deployment Protection, specific header and error string) that minimize overlap with other skills.

5 / 5

Total

19

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository
vercel/vercel-plugin
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.