deploy-to-vercel

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill manages the installation of the official Vercel CLI via the npm registry using 'npm install -g vercel'. This is a standard requirement for interacting with Vercel's services.
  • [DATA_EXFILTRATION]: Local project files are uploaded to official Vercel deployment infrastructure at 'claude-skills-deploy.vercel.com' and 'codex-deploy-skills.vercel.sh'. The deployment scripts 'deploy.sh' and 'deploy-codex.sh' implement specific safeguards to exclude sensitive credentials (including .env files) and git metadata from the uploaded archive.
  • [COMMAND_EXECUTION]: Utilizes common development tools such as 'git', 'npm', and 'vercel' to facilitate the deployment lifecycle. Commands are used for their primary intended purposes such as state checking, project linking, and triggering build processes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:45 AM
Security Audit — agent-trust-hub — deploy-to-vercel