vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes a network request to
https://claude-skills-deploy.vercel.com/api/deployto upload the project files. This targets Vercel, which is a well-known and trusted service for web deployments. - [COMMAND_EXECUTION]: The script uses standard shell utilities (
tar,curl,find,mv,mktemp) to package and deploy files. These actions are limited to the path provided by the user and are necessary for the skill's primary function of deploying a project. - [DATA_EXFILTRATION]: While project files are sent to a remote server, this is the intended behavior of a deployment skill. The script explicitly excludes sensitive directories like
.gitandnode_modulesduring the packaging process, which helps prevent accidental exposure of local git history or large dependency trees.
Audit Metadata