deploy-to-vercel
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard deployment workflows using the Vercel CLI and Git. This includes commands such as
vercel deploy,vercel link,vercel teams list, andgit pushto manage the project lifecycle on the Vercel platform. - [EXTERNAL_DOWNLOADS]: Facilitates the installation of the official Vercel command-line interface from the public npm registry (
npm install -g vercel) when the tool is missing from the environment. - [DATA_EXFILTRATION]: Packages and uploads project source code to Vercel's official deployment endpoints (
claude-skills-deploy.vercel.comandcodex-deploy-skills.vercel.sh). This behavior is the primary intended function of the skill. To prevent accidental exposure of credentials, the included scripts utilizetarwith exclusion patterns to ensure that.envfiles and.gitdirectories are not included in the uploaded payloads.
Audit Metadata