deploy-to-vercel

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Official CLI Integration: The skill utilizes the vercel CLI to manage deployments, team selection, and project linking. These are standard operations for interacting with the Vercel platform and managing cloud infrastructure.
  • External Package Management: The instructions include a step to install the Vercel CLI using npm install -g vercel. This is a routine operation for setting up the necessary development tools from a well-known package registry.
  • Secure Data Handling: When packaging projects for deployment via the fallback script, it explicitly excludes sensitive files such as .env, .git, and node_modules. This is a proactive security measure designed to prevent the accidental exposure of credentials or unnecessary project metadata.
  • Automated Deployment Workflow: An included bash script (deploy-codex.sh) automates framework detection and communicates with a Vercel-hosted endpoint (codex-deploy-skills.vercel.sh) to perform deployments. This is intended for environments where standard CLI authentication might be unavailable.
  • User Confirmation: Critical actions, such as pushing local code changes to a remote repository to trigger a build, are designed to prompt for user approval before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 06:18 AM