vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with an external deployment endpoint at https://codex-deploy-skills.vercel.sh/api/deploy to facilitate project uploads.\n- [DATA_EXFILTRATION]: The scripts/deploy.sh script archives the project directory for deployment. It implements security best practices by explicitly excluding sensitive files and directories, such as .env files, .git metadata, and local agent configuration folders, from the uploaded package.\n- [COMMAND_EXECUTION]: The skill uses local shell commands to execute the Vercel CLI and a deployment script. It provides clear instructions for the agent to manage sandbox network restrictions by requesting the appropriate permissions from the user when necessary.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 01:01 AM
Security Audit — agent-trust-hub — vercel-deploy