skills/jetbrains/skills/vercel-deploy/Gen Agent Trust Hub

vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with an external deployment API at https://codex-deploy-skills.vercel.sh/api/deploy to upload project artifacts for hosting. It also performs status checks against generated preview URLs to confirm deployment success.
  • [COMMAND_EXECUTION]: The skill executes local system commands including the vercel CLI and a provided bash script (scripts/deploy.sh) to package and transmit project files. It follows best practices by checking for existing installations before attempting execution.
  • [DATA_EXFILTRATION]: While the skill transmits project source code to Vercel, this is the primary intended function of a deployment tool. The included deployment script explicitly prevents the exfiltration of sensitive data by excluding .env files, .git metadata, and node_modules from the upload package.
  • [SAFE]: The skill's architecture respects sandbox boundaries, only requesting escalated network permissions when necessary for deployment, and provides clear user-facing guidance for authorization and deployment management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:45 AM
Security Audit — agent-trust-hub — vercel-deploy