vercel-react-expert

SUSPICIOUS: the declared role is just legacy compatibility routing, but the actual footprint is much broader, requiring multiple external decision/execution interfaces and default delegation to other runtimes/skills. No clear credential theft or malicious payload is present, but purpose-capability mismatch and third-party execution proxying make this a medium-risk skill.