vercel-deploy

SUSPICIOUS: The stated purpose fits Vercel deployment and the visible domains align with official Vercel claim/preview flows, but the skill's actual behavior is concentrated in an unseen shell script. Because that script packages local files and uploads them off-host, the main risk is unverifiable data flow rather than confirmed malware.