vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Communicates with official Vercel API endpoints (api.vercel.com) for project verification and deployment status polling.
- [COMMAND_EXECUTION]: Utilizes the
vercelCLI to perform non-interactive production deployments using provided authentication tokens. - [COMMAND_EXECUTION]: Uses standard shell commands (
curl,sed,grep,python3) for data processing and network requests during the deployment lifecycle. - [SAFE]: Instructions for handling
VERCEL_TOKENexplicitly specify retrieving it from the agent's secure secret store rather than hardcoding.
Audit Metadata