deploy-to-vercel
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Official CLI Integration: The skill utilizes the
vercelCLI to manage deployments, team selection, and project linking. These are standard operations for interacting with the Vercel platform and managing cloud infrastructure. - External Package Management: The instructions include a step to install the Vercel CLI using
npm install -g vercel. This is a routine operation for setting up the necessary development tools from a well-known package registry. - Secure Data Handling: When packaging projects for deployment via the fallback script, it explicitly excludes sensitive files such as
.env,.git, andnode_modules. This is a proactive security measure designed to prevent the accidental exposure of credentials or unnecessary project metadata. - Automated Deployment Workflow: An included bash script (
deploy-codex.sh) automates framework detection and communicates with a Vercel-hosted endpoint (codex-deploy-skills.vercel.sh) to perform deployments. This is intended for environments where standard CLI authentication might be unavailable. - User Confirmation: Critical actions, such as pushing local code changes to a remote repository to trigger a build, are designed to prompt for user approval before execution.
Audit Metadata