vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official Vercel CLI commands (vercel deploy, vercel --prod) for deployment activities. These are industry-standard tools and practices.
  • [EXTERNAL_DOWNLOADS]: Mentions installing the Vercel CLI via npm i -g vercel. As Vercel is a well-known service and the command is standard for its ecosystem, this is a safe and expected operation.
  • [COMMAND_EXECUTION]: Provides examples for scaffolding projects using npx create-next-app, which is the official tool from Vercel/Next.js for project initialization.
  • [CREDENTIALS_UNSAFE]: Correctly instructs users to manage sensitive secrets via the Vercel Dashboard's environment variables rather than hardcoding them in the skill or code, following security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 05:14 AM
Security Audit — agent-trust-hub — vercel-deploy