deploy-to-vercel
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the official Vercel CLI from the public npm registry if it is not already present.
- [DATA_EXFILTRATION]: Project files are packaged and uploaded to Vercel's deployment services at vercel.com and vercel.sh to create live preview links. The packaging process explicitly excludes sensitive files such as .env and .git directories to prevent credential exposure.
- [COMMAND_EXECUTION]: Shell commands are used to check project status, manage git operations, and execute the Vercel CLI to perform deployments.
- [SAFE]: The skill implements protective measures by filtering out environment variables and sensitive local configuration before transmission, and utilizes well-known service endpoints for its operations.
Audit Metadata