deployments-cicd
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill utilizes various
vercelCLI commands to manage deployments, promotions, and rollbacks. These operations are consistent with its stated purpose as a deployment assistant and align with standard developer workflows for the service. - External Dependency Reference: The CI/CD integration examples demonstrate installing the
vercelpackage globally usingnpm. This references the official tool from a well-known public registry. - Credential Management Guidance: The instructions identify sensitive environment variables, such as
VERCEL_TOKEN, and explicitly direct users to store them as secrets in their CI provider rather than committing them to source control, which is an industry security best practice. - Log Processing Surface: The skill provides templates for summarizing deployment logs and metadata. While this involves processing data from external sources, the context is limited to standard diagnostic reporting and diagnostic summaries.
Audit Metadata