deploy-to-vercel

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official Vercel CLI from the NPM registry to enable deployment capabilities.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands including git for status checks and commits, and the vercel CLI for project linking and deployment operations. It also runs internal helper scripts to handle deployments in sandboxed environments.
  • [DATA_EXFILTRATION]: Project source code is uploaded to Vercel's deployment infrastructure (*.vercel.com and *.vercel.sh) to create live deployments. The inclusion of an exclusion list for .env and .git files ensures that credentials and sensitive history are not transmitted.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 03:33 AM