ATL-539: Vercel credential injection hardening#30401

Merged

alex-nork merged 11 commits into

mainfrom

alex-nork/atl-539-vercel-credential-injection

May 12, 2026

Commits on May 12, 2026

feat(security): escalate credentialed proxied bash to high risk classification (#30383)
alex-nork
authored
Part of ATL-539: Restrict new Vercel token metadata to publish tools (#30381)

alex-nork
and
claude
authored
Part of ATL-539: Enforce credential policy before proxied bash sessions (#30384)

alex-nork
and
claude
authored
feat(security): workspace migration to repair existing Vercel credential metadata (#30389)
alex-nork
authored
Part of ATL-539: Remove Vercel credential proxy guidance from skills (#30388)

alex-nork
and
claude
authored
fix: backfill bash into allowedTools for credentials with injection templates (#30393)
alex-nork
authored
fix: include bash in allowedTools for non-Vercel credential creation (#30396)
alex-nork
authored
fix: add bash to allowedTools for Slack credential setup (#30400)
alex-nork
authored
chore: regenerate skills catalog.json from final feature branch state

alex-nork
and
claude
committed
chore: resolve catalog.json conflict by regenerating from merged state

alex-nork
and
claude
committed
chore: fix catalog.json updatedAt for stripe-app-setup

alex-nork
and
claude
committed