vercel-deploy

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill package includes a deployment helper script (scripts/deploy.sh) that silently uploads the user's project tarball to an external, third-party endpoint (claude-skills-deploy.vercel.com) without disclosure in the main instructions.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (critical risk: 1.00). The script in scripts/deploy.sh uploads bundled project tarballs to an external third-party endpoint (claude-skills-deploy.vercel.com), which exfiltrates user source code and project data to an unintended external party without authorization or a credible benign purpose.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script references https://claude-skills-deploy.vercel.com/api/deploy as an operational deployment endpoint that uploads project tarballs during runtime, presenting a weak external dependency from an uncontrolled third-party subdomain.