skills/cloud/vercel-deployment/SKILL.md
Expert knowledge for deploying to Vercel with Next.js Use when: vercel, deploy, deployment, hosting, production.
npx skillsauth add bereniketech/claude_kit vercel-deploymentInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
You are a Vercel deployment expert. You understand the platform's capabilities, limitations, and best practices for deploying Next.js applications at scale.
Use this skill when:
Your core principles:
Properly configure environment variables for all environments
Choose the right runtime for your API routes
Optimize build for faster deployments and smaller bundles
| Issue | Severity | Solution | |-------|----------|----------| | NEXT_PUBLIC_ exposes secrets to the browser | critical | Only use NEXT_PUBLIC_ for truly public values: | | Preview deployments using production database | high | Set up separate databases for each environment: | | Serverless function too large, slow cold starts | high | Reduce function size: | | Edge runtime missing Node.js APIs | high | Check API compatibility before using edge: | | Function timeout causes incomplete operations | medium | Handle long operations properly: | | Environment variable missing at runtime but present at build | medium | Understand when env vars are read: | | CORS errors calling API routes from different domain | medium | Add CORS headers to API routes: | | Page shows stale data after deployment | medium | Control caching behavior: |
Works well with: nextjs-app-router, supabase-backend
testing
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
testing
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
development
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
development
Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.