Skills
Navigate
skills/michaeltarasov02/skills/deploy-to-vercel/Gen Agent Trust Hub

deploy-to-vercel

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several local commands to manage deployments, including git, vercel CLI, and tar for packaging projects. These are standard operations for the stated purpose of deploying code.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the Vercel CLI from npm (npm install -g vercel) and uses scripts that upload project tarballs to Vercel's official deployment endpoints (claude-skills-deploy.vercel.com and codex-deploy-skills.vercel.sh). These operations target well-known, trusted services.
  • [DATA_EXFILTRATION]: While the skill uploads local project files to Vercel, it explicitly includes safeguards to prevent the exposure of sensitive data by excluding .env, .env.*, and .git directories during the packaging process (seen in resources/deploy.sh and resources/deploy-codex.sh).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 12:22 PM
Security Audit — agent-trust-hub — deploy-to-vercel