vercel-deploy

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The script deliberately packages and uploads the user's project (excluding only node_modules and .git) to an external deploy endpoint without authentication/consent, creating a clear data-exfiltration channel that can leak source code, configuration files, and secrets; there is no obvious hidden RCE or obfuscated payload, but the network upload to a third‑party endpoint is an explicit and high‑risk malicious/abusive behavior.