vercel-deploy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The included scripts/deploy.sh makes a runtime POST to https://claude-skills-deploy.vercel.com/api/deploy which uploads a tarball and triggers remote deployment execution (returning JSON used by the script), so this external URL is a runtime dependency that executes remote code.