Official agent skill

Vercel Firewall

by vercel in vercel/vercel-plugin

Vercel Firewall expert guidance — automatic DDoS mitigation, the Vercel WAF (custom rules, IP blocking, managed rulesets, rate limiting), Attack Mode, system bypass, bot management, and the vercel…

OfficialCustom licenceAuto-check: notesBackend & APIs

Install Vercel Firewall

skills CLI
$ npx skills add vercel/vercel-plugin --skill vercel-firewall -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install vercel/vercel-plugin vercel-firewall --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/vercel/vercel-plugin.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/vercel-firewall .claude/skills/vercel-firewall && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
vercel-firewall
GitHub stars
301
Token cost
~5.4k tokens
SKILL.md length
1,970 words
Files
2
Skills in repo
38
Repo updated
First seen
Licence
Custom licence

At a glance

Vercel Firewall expert guidance — automatic DDoS mitigation, the Vercel WAF (custom rules, IP blocking, managed rulesets, rate limiting), Attack Mode, system bypass, bot management, and the vercel…

  • Works in 4 steps: Log everywhere. Add the rule with… → Have the user review traffic in the… → Block in preview first. Edit the rule to… → …
  • Configuring platform-level security
  • SKILL.md covers Core Knowledge, Overview, Custom rules and IP blocks, plus 8 more sections
  • Calls vercel

What it does

Vercel Firewall is an agent skill from vercel/vercel-plugin, published by the product's own GitHub organization. Vercel Firewall expert guidance — automatic DDoS mitigation, the Vercel WAF (custom rules, IP blocking, managed rulesets, rate limiting), Attack Mode, system bypass, bot management, and the vercel firewall CLI. Use when configuring platform-level security, responding to attacks, or staging firewall rules.

Its SKILL.md is about 5.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file.

It sits in Backend & APIs, covering Rate limiting and Cloud networking. It works with Vercel. The repository describes itself as: Comprehensive Vercel ecosystem plugin — relational knowledge graph, skills for every major product, specialized agents, and Vercel conventions. Turns any AI agent into a Vercel…

When your agent uses it

  • Configuring platform-level security
  • Responding to attacks
  • Staging firewall rules

Example prompts

  • “/vercel-firewall”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Log everywhere. Add the rule with --action log so it records hits to the Firewall dashboard but blocks nothing.
  2. Have the user review traffic in the dashboard. Get the rule ID from the rules add output or vercel firewall rules list --json (look for…
  3. Block in preview first. Edit the rule to deny (or challenge) and add an environment = preview condition so production stays in log mode…
  4. Block in production. Once the user is satisfied with the production log data, edit to deny / challenge and have them publish. Keep the…

What it can do on your machine

Read from SKILL.md and the folder at commit 82fa491. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • vercel

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • vercel.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Vercel Firewall loads about 5.4k tokens when it runs. Until then it costs about 81 tokens; SKILL.md has 1,970 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~81
When it runs · the whole SKILL.md, loaded when a task matches
~5.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteMentions a .env fileSKILL.md:314
    "path","op":"inc","value":["/wp-admin","/.env","/.git/config","/phpmyadmin"]}' \
  • NoteMentions a .env fileSKILL.md:331
    "path","op":"inc","value":["/wp-admin","/.env","/.git/config","/phpmyadmin"]}' \

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,970 words (~5,433 tokens).

“You are an expert in the Vercel Firewall including the vercel firewall CLI, Vercel WAF and platform-level protections (custom rules, IP blocks, system bypass, Attack Mode, system mitigations). You follow all the best practices outlined below.”

— opening of SKILL.md by vercel, Custom licence
name
vercel-firewall
metadata.priority
7
metadata.docs
https://vercel.com/docs/vercel-firewall, https://vercel.com/docs/cli/firewall
metadata.bashPatterns
\bvercel\s+firewall\b
retrieval.aliases
ddos protection, waf rules, bot protection, rate limiting, attack mode, ip allowlist, traffic filtering, verified bots
retrieval.intents
protect from ddos, block malicious traffic, configure firewall, rate limit api, allow bot through firewall, enable attack mode, publish firewall rule
retrieval.entities
Vercel Firewall, Vercel WAF, DDoS, Attack Mode, Bot Protection, Managed Rulesets, System Bypass, JA3, JA4

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in skills/vercel-firewall of vercel/vercel-plugin.

  • SKILL.md
  • .vercel.approvers

Open the folder on GitHubat commit 82fa491

Compare with similar skills

Vercel Firewall next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Vercel Firewall compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Vercel Firewall this skillvercel/vercel-plugin301—~5.4kAutomated safety check: NotesCustom licence
Frontmcp Configagentfront/frontmcp146—~7kAutomated safety check: PassApache-2.0
Azure Aigatewaymicrosoft/GitHub-Copilot-for-Azure2552 repos~1.3kAutomated safety check: PassMIT
Implementing API Threat Protection With Apigeemukul975/Anthropic-Cybersecurity-Skills34k—~2.8kAutomated safety check: PassApache-2.0
LLM Gatewaysickn33/agentic-awesome-skills47k1 repos~2.1kAutomated safety check: PassMIT
Upstash Redisgithub/awesome-copilot40k—~1.7kAutomated safety check: PassMIT

Similar skills

  • Frontmcp Config

    agentfront/frontmcp

    A skill your agent uses when configuring a FrontMCP server through frontmcp.config or the @FrontMcp options.

    146 GitHub stars~7k tokensUpdated yesterday
    Backend & APIsAuto-check passed
  • Azure Aigateway

    microsoft/GitHub-Copilot-for-Azure

    Official

    Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents.

    255 GitHub starsUsed in 2 repos~1.3k tokens
    Backend & APIsAuto-check passed
  • Implementing API Threat Protection With Apigee

    mukul975/Anthropic-Cybersecurity-Skills

    Implements API threat protection using Google Apigee reverse-proxy policies, including JSON/XML threat protection, OAuth 2.0 enforcement, SpikeArrest rate limiting, regex-based threat detection, and…

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed
  • LLM Gateway

    sickn33/agentic-awesome-skills

    Deploy an API gateway for LLM traffic with load balancing, rate limiting, key management, semantic caching, fallback routing, and cost tracking.

    47k GitHub starsUsed in 1 repo~2.1k tokens
    Backend & APIsAuto-check passed
  • Upstash Redis

    github/awesome-copilot

    Official

    Use Redis over HTTP from serverless and edge runtimes with @upstash/redis, and add rate limiting with @upstash/ratelimit.

    40k GitHub stars~1.7k tokensUpdated today
    Backend & APIsAuto-check passed
  • Vercel Rate Limits

    jeremylongshore/tons-of-skills-marketplace

    Handle Vercel API rate limits, implement retry logic, and configure WAF rate limiting.

    2.8k GitHub stars~1.9k tokensUpdated today
    Backend & APIsAuto-check passed

More from vercel/vercel-plugin

All 38 skills in this repo
  • Deployments Cicd

    vercel/vercel-plugin

    Official

    Vercel deployment and CI/CD expert guidance. An agent skill from vercel/vercel-plugin.

    301 GitHub starsUsed in 1 repo~3k tokens
    Auto-check passed
  • Plugin Audit

    vercel/vercel-plugin

    Official

    Audit vercel-plugin performance on real-world projects. An agent skill from vercel/vercel-plugin.

    301 GitHub stars~739 tokensUpdated today
    Auto-check passed
  • Vercel CLI

    vercel/vercel-plugin

    Official

    Vercel CLI expert guidance. An agent skill from vercel/vercel-plugin.

    301 GitHub starsUsed in 1 repo~2.5k tokens
    Auto-check passed
  • AI Gateway

    vercel/vercel-plugin

    Official

    Vercel AI Gateway guidance for setup, model discovery, authentication, routing, fallbacks, virtual models, evaluation models, BYOK, budgets, spend reporting, observability, compatible APIs, and…

    301 GitHub stars~4.4k tokensUpdated today
    Auto-check: notes
  • Vercel Services

    vercel/vercel-plugin

    Official

    Configure and troubleshoot Vercel Services for multiple frontends and backends in one project.

    301 GitHub stars~3k tokensUpdated today
    Auto-check passed
  • Official

    Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection.

    301 GitHub stars~1.9k tokensUpdated today
    Auto-check: notes

Works with

Categories

Questions about Vercel Firewall

What does Vercel Firewall do?

Vercel Firewall expert guidance — automatic DDoS mitigation, the Vercel WAF (custom rules, IP blocking, managed rulesets, rate limiting), Attack Mode, system bypass, bot management, and the vercel…. Vercel Firewall is an agent skill from vercel/vercel-plugin, published by the product's own GitHub organization. Vercel Firewall expert guidance — automatic DDoS mitigation, the Vercel WAF (custom rules, IP blocking, managed rulesets, rate limiting), Attack Mode, system bypass, bot management, and the vercel firewall CLI.

When should I use Vercel Firewall?

Vercel Firewall fits situations like: configuring platform-level security; responding to attacks; staging firewall rules.

How do I install Vercel Firewall in Claude Code?

Run `npx skills add vercel/vercel-plugin --skill vercel-firewall -a claude-code`. Or copy the skill folder (skills/vercel-firewall in vercel/vercel-plugin) into .claude/skills/vercel-firewall in your project. Claude Code loads it when a task matches its description.

How do I install Vercel Firewall in Codex?

Run `npx skills add vercel/vercel-plugin --skill vercel-firewall -a codex`. Or copy the skill folder (skills/vercel-firewall in vercel/vercel-plugin) into .agents/skills/vercel-firewall in your project. Codex loads it when a task matches its description.

Can I use Vercel Firewall in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add vercel/vercel-plugin --skill vercel-firewall -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/vercel-firewall, .gemini/skills/vercel-firewall, .github/skills/vercel-firewall and .opencode/skills/vercel-firewall in your project.

What does Vercel Firewall need to run?

Going by SKILL.md and its folder, Vercel Firewall needs the command-line tools its instructions call (vercel).

Does Vercel Firewall access the network?

SKILL.md names 1 domain. As links in the text: vercel.com. This is read from the text; nothing was executed.

Is Vercel Firewall safe to install?

Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Vercel Firewall use?

Vercel Firewall has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Vercel Firewall use?

About 5.4k tokens (SKILL.md is roughly 22k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Vercel Firewall?

Skills that share tags, products or a category with Vercel Firewall: Frontmcp Config (agentfront/frontmcp, 146 stars), Azure Aigateway (microsoft/GitHub-Copilot-for-Azure, 255 stars), Implementing API Threat Protection With Apigee (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and LLM Gateway (sickn33/agentic-awesome-skills, 47k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Vercel Firewall?

vercel (a GitHub organization, an official publisher) maintains it in vercel/vercel-plugin, which has 301 GitHub stars. The repository holds 38 skills in this directory. The repository was last updated on October 7, 2026.

Source: vercel/vercel-plugin on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.