vercel-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the
vercelCLI for production deployments, promotions, and rollbacks, and utilizescurlfor health checks and API interactions. - [EXTERNAL_DOWNLOADS]: Communicates with official Vercel API endpoints (
api.vercel.com) and references documentation onvercel.com. These are well-known and trusted services. - [INDIRECT_PROMPT_INJECTION]: The skill processes deployment URLs, project metadata, and responses from external health check endpoints. This creates an attack surface where malicious external data could potentially attempt to influence the agent.
- [SAFE]: Mentions and links to vendor-owned resources such as
intentsolutions.ioandjeremylongshore.comfor developer context.
Audit Metadata