deployments-cicd

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill utilizes various vercel CLI commands to manage deployments, promotions, and rollbacks. These operations are consistent with its stated purpose as a deployment assistant and align with standard developer workflows for the service.
  • External Dependency Reference: The CI/CD integration examples demonstrate installing the vercel package globally using npm. This references the official tool from a well-known public registry.
  • Credential Management Guidance: The instructions identify sensitive environment variables, such as VERCEL_TOKEN, and explicitly direct users to store them as secrets in their CI provider rather than committing them to source control, which is an industry security best practice.
  • Log Processing Surface: The skill provides templates for summarizing deployment logs and metadata. While this involves processing data from external sources, the context is limited to standard diagnostic reporting and diagnostic summaries.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 03:11 PM