Official agent skill

Plugin Audit

by vercel in vercel/vercel-plugin

Audit vercel-plugin performance on real-world projects. An agent skill from vercel/vercel-plugin.

OfficialCustom licenceAuto-check passedTesting & QA

Install Plugin Audit

skills CLI
$ npx skills add vercel/vercel-plugin --skill plugin-audit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install vercel/vercel-plugin plugin-audit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/vercel/vercel-plugin.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/plugin-audit .claude/skills/plugin-audit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
plugin-audit
GitHub stars
301
Token cost
~739 tokens
SKILL.md length
293 words
Files
3 (incl. scripts, references)
Skills in repo
38
Repo updated
First seen
Licence
Custom licence

At a glance

Audit vercel-plugin performance on real-world projects. An agent skill from vercel/vercel-plugin.

  • Works in 5 steps: Locate conversation logs → Extract tool calls → Test hook matching → …
  • Investigate plugin skill injection on a real project
  • SKILL.md covers Workflow, Report Format and References
  • Runs JavaScript scripts from its folder

What it does

Plugin Audit is an agent skill from vercel/vercel-plugin, published by the product's own GitHub organization. Audit vercel-plugin performance on real-world projects. Extracts tool calls from Claude Code conversation logs, tests hook matching against actual inputs, identifies pattern coverage gaps, and checks plugin cache staleness. Use when asked to audit, test, or investigate plugin skill injection on a real project.

Its SKILL.md is about 740 tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files, including scripts and reference files (for example `references/log-format.md`).

It sits in Testing & QA, covering Test coverage. It works with Vercel. The repository describes itself as: Comprehensive Vercel ecosystem plugin — relational knowledge graph, skills for every major product, specialized agents, and Vercel conventions. Turns any AI agent into a Vercel…

When your agent uses it

  • Investigate plugin skill injection on a real project
  • Tasks that involve Test coverage

Example prompts

  • “/plugin-audit”

Requirements

  • Node.js

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Locate conversation logs
  2. Extract tool calls
  3. Test hook matching
  4. Identify gaps
  5. Check plugin cache staleness

What it can do on your machine

Read from SKILL.md and the folder at commit 82fa491. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (JavaScript), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Plugin Audit loads about 739 tokens when it runs, and up to ~1.2k if it reads all its reference files. Until then it costs about 81 tokens; SKILL.md has 293 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~81
When it runs · the whole SKILL.md, loaded when a task matches
~739
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 293 words (~739 tokens).

“Audit how well vercel-plugin skill injection performs on real-world Claude Code sessions.”

— opening of SKILL.md by vercel, Custom licence
name
plugin-audit

Read the full SKILL.md on GitHub

Files

SKILL.md and 2 other files (scripts, references) in .claude/skills/plugin-audit of vercel/vercel-plugin.

  • SKILL.md
  • references/log-format.md
  • scripts/batch-match.mjs

Open the folder on GitHubat commit 82fa491

Compare with similar skills

Plugin Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Plugin Audit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Plugin Audit this skillvercel/vercel-plugin301—~739Automated safety check: PassCustom licence
Test Writing WorkflowiOfficeAI/AionUi33k1 repos~1.2kAutomated safety check: PassApache-2.0
Evaluate PR Testsdotnet/maui23k—~2.9kAutomated safety check: PassMIT
Requirementsrizsotto/Bear6.5k—~2kAutomated safety check: PassGPL-3.0
Mutantmbj/mutant2.2k—~2kAutomated safety check: PassProprietary
Senior QAnicepkg/auto-company1923 repos~1.1kAutomated safety check: NotesNone

Similar skills

  • Test Writing Workflow

    iOfficeAI/AionUi

    Sets the test-writing workflow for the repository: risk-first scenario lists, behavior-focused Vitest tests, a full run before each commit and a coverage target.

    33k GitHub starsUsed in 1 repo~1.2k tokens
    Testing & QAAuto-check passed
  • Official

    Reviews the tests added in a pull request for fix coverage, quality, edge cases and test type, and recommends lighter test types where they would do.

    23k GitHub stars~2.9k tokensUpdated today
    Testing & QAAuto-check passed
  • Requirements

    rizsotto/Bear

    Write, modify, or review a requirement file under docs/requirements -- pick the single owning file, keep the text contract-only, name IDs so they need no explanation, and verify cross-references and…

    6.5k GitHub stars~2k tokensUpdated today
    Testing & QAAuto-check passed
  • Mutant

    mbj/mutant

    Run mutant, read mutation reports, fix alive mutations, and verify coverage.

    2.2k GitHub stars~2k tokensUpdated 5 days ago
    Testing & QAAuto-check passed
  • Senior QA

    nicepkg/auto-company

    Comprehensive QA and testing skill for quality assurance, test automation, and testing strategies for ReactJS, NextJS, NodeJS applications.

    192 GitHub starsUsed in 3 repos~1.1k tokens
    Testing & QAAuto-check: notes
  • OpenROAD Module Test Adder

    The-OpenROAD-Project/OpenROAD

    Adds integration or unit tests to an OpenROAD module: writes the Tcl test, generates golden files and registers it in both CMake and Bazel.

    3.2k GitHub stars~1.8k tokensUpdated yesterday
    Testing & QAAuto-check passed

More from vercel/vercel-plugin

All 38 skills in this repo
  • Deployments Cicd

    vercel/vercel-plugin

    Official

    Vercel deployment and CI/CD expert guidance. An agent skill from vercel/vercel-plugin.

    301 GitHub starsUsed in 1 repo~3k tokens
    Auto-check passed
  • Vercel CLI

    vercel/vercel-plugin

    Official

    Vercel CLI expert guidance. An agent skill from vercel/vercel-plugin.

    301 GitHub starsUsed in 1 repo~2.5k tokens
    Auto-check passed
  • AI Gateway

    vercel/vercel-plugin

    Official

    Vercel AI Gateway guidance for setup, model discovery, authentication, routing, fallbacks, virtual models, evaluation models, BYOK, budgets, spend reporting, observability, compatible APIs, and…

    301 GitHub stars~4.4k tokensUpdated yesterday
    Auto-check: notes
  • Vercel Services

    vercel/vercel-plugin

    Official

    Configure and troubleshoot Vercel Services for multiple frontends and backends in one project.

    301 GitHub stars~3k tokensUpdated yesterday
    Auto-check passed
  • Official

    Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection.

    301 GitHub stars~1.9k tokensUpdated yesterday
    Auto-check: notes
  • Bootstrap

    vercel/vercel-plugin

    Official

    Project bootstrapping orchestrator for repos that depend on Vercel-linked resources (databases, auth, and managed integrations).

    301 GitHub stars~2.1k tokensUpdated yesterday
    Auto-check: notes

Works with

Categories

Questions about Plugin Audit

What does Plugin Audit do?

Audit vercel-plugin performance on real-world projects. An agent skill from vercel/vercel-plugin. Plugin Audit is an agent skill from vercel/vercel-plugin, published by the product's own GitHub organization. Audit vercel-plugin performance on real-world projects.

When should I use Plugin Audit?

Plugin Audit fits situations like: investigate plugin skill injection on a real project; tasks that involve Test coverage.

How do I install Plugin Audit in Claude Code?

Run `npx skills add vercel/vercel-plugin --skill plugin-audit -a claude-code`. Or copy the skill folder (.claude/skills/plugin-audit in vercel/vercel-plugin) into .claude/skills/plugin-audit in your project. Claude Code loads it when a task matches its description.

How do I install Plugin Audit in Codex?

Run `npx skills add vercel/vercel-plugin --skill plugin-audit -a codex`. Or copy the skill folder (.claude/skills/plugin-audit in vercel/vercel-plugin) into .agents/skills/plugin-audit in your project. Codex loads it when a task matches its description.

Can I use Plugin Audit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add vercel/vercel-plugin --skill plugin-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/plugin-audit, .gemini/skills/plugin-audit, .github/skills/plugin-audit and .opencode/skills/plugin-audit in your project.

What does Plugin Audit need to run?

Going by SKILL.md and its folder, Plugin Audit needs JavaScript for the scripts in its folder. Our summary lists: Node.js.

Does Plugin Audit access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Plugin Audit safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Plugin Audit use?

Plugin Audit has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Plugin Audit use?

About 739 tokens (SKILL.md is roughly 3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 431 tokens, read only when the agent opens those files.

What are the alternatives to Plugin Audit?

Skills that share tags, products or a category with Plugin Audit: Test Writing Workflow (iOfficeAI/AionUi, 33k stars), Evaluate PR Tests (dotnet/maui, 23k stars), Requirements (rizsotto/Bear, 6.5k stars) and Mutant (mbj/mutant, 2.2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Plugin Audit?

vercel (a GitHub organization, an official publisher) maintains it in vercel/vercel-plugin, which has 301 GitHub stars. The repository holds 38 skills in this directory. The repository was last updated on October 6, 2026.

Source: vercel/vercel-plugin on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.