vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the Vercel CLI from the official npm registry (
npm install -g vercel@latest). This is a standard installation procedure for a well-known deployment service. - [COMMAND_EXECUTION]: The skill uses various
vercelandgitCLI commands to manage project lifecycles. These are standard operational commands intended for project setup and deployment. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where local project data (environment variables and configuration files) is processed by the deployment tool.
- Ingestion points: The skill reads local
.envfiles and project root configuration to sync with the Vercel platform. - Boundary markers: Not explicitly specified in the skill instructions; it assumes trust in the local project environment.
- Capability inventory: Includes shell command execution via CLI and network communication with Vercel's official API endpoints.
- Sanitization: The skill relies on the official Vercel CLI to handle input validation and secure transmission of environment variables.
Audit Metadata