vercel-deploy-claimable
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script located at
/mnt/skills/user/vercel-deploy/scripts/deploy.shto handle the packaging and deployment process. - [INDIRECT_PROMPT_INJECTION]: The skill processes files from user-provided project directories, which constitutes an ingestion of untrusted data.
- Ingestion points: Project files are read from the directory path provided to the deployment script (
SKILL.md). - Boundary markers: There are no explicit instructions or delimiters defined in the documentation to prevent the agent from following instructions embedded within the files being deployed.
- Capability inventory: The skill possesses the ability to execute shell scripts and perform network uploads to Vercel's infrastructure (
SKILL.md). - Sanitization: The provided documentation does not specify any sanitization or filtering of the content within the project files before they are processed.
Audit Metadata