vibe-coding-deploy-vercel
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the Vercel CLI from the official npm registry. This involves downloading software from a well-known service provider to support the deployment workflow.
- [DYNAMIC_EXECUTION]: The skill provides templates for Python serverless functions and configuration files. These represent simple script and configuration generation from known templates for deployment purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill parses project-specific files to configure the deployment environment, which represents a potential surface for indirect instructions.
- Ingestion points: Reads project configuration files including package.json, vercel.json, requirements.txt, and .vercel/project.json.
- Boundary markers: The skill does not employ explicit delimiters or boundary markers when reading file contents into the agent context.
- Capability inventory: The skill utilizes the vercel command-line interface, which has capabilities for network communication, environment variable management, and file system synchronization.
- Sanitization: No specific sanitization or validation logic is applied to the contents of the ingested configuration files.
Audit Metadata