deploy-to-vercel
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official Vercel CLI from the NPM registry to enable deployment capabilities.
- [COMMAND_EXECUTION]: The skill utilizes shell commands including
gitfor status checks and commits, and thevercelCLI for project linking and deployment operations. It also runs internal helper scripts to handle deployments in sandboxed environments. - [DATA_EXFILTRATION]: Project source code is uploaded to Vercel's deployment infrastructure (
*.vercel.comand*.vercel.sh) to create live deployments. The inclusion of an exclusion list for.envand.gitfiles ensures that credentials and sensitive history are not transmitted.
Audit Metadata