vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script executes
tarto package the project directory,findfor file detection, andmvto rename static HTML files. These are standard operations for a deployment tool. - [EXTERNAL_DOWNLOADS]: The skill uses
curlto upload the project tarball to a Vercel-owned endpoint (claude-skills-deploy.vercel.com). This is a well-known service associated with the skill's stated purpose. - [REMOTE_CODE_EXECUTION]: The deployment process involves uploading code to Vercel, which then executes it in a cloud environment. This is the intended function of a deployment skill and occurs on the vendor's managed infrastructure.
Audit Metadata