vercel-automation

SUSPICIOUS: The skill's Vercel automation purpose matches its capabilities, but the data flow is routed through Composio/Rube as a third-party intermediary with broad administrative reach over Vercel resources. The main concern is not obvious malware, but disproportionate trust in a hosted MCP that may receive OAuth-backed access to deployments, DNS, env vars, and team data, plus inconsistent setup/auth claims.