vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network operations via
curlto upload project data to the Vercel deployment service (claude-skills-deploy.vercel.com). This target is a well-known service associated with the skill's primary purpose. - [COMMAND_EXECUTION]: The
deploy.shscript utilizes standard system utilities includingtarfor packaging,curlfor transmission, andfind,mv, andgrepfor file management and framework detection. These commands are used to process project files as intended by the skill's description. - [DATA_EXFILTRATION]: The skill transmits the contents of the project directory to Vercel for deployment. While it excludes standard directories like
.gitandnode_modules, it does not perform exhaustive filtering of all potentially sensitive files (e.g., local environment variables). This data transfer is a requirement for the skill's stated functionality and targets a trusted service provider.
Audit Metadata