vercel-deploy

This script is not obviously obfuscated and does not contain classic malware constructs (no shells, no eval, no process spawning for remote control). The primary risk is that it packages and uploads the full project contents to a hardcoded remote endpoint (claude-skills-deploy.vercel.com) without authentication or filtering — which can leak secrets or proprietary code. Use only if you trust the endpoint and the script's provenance; otherwise add explicit excludes and require user confirmation before upload.