vercel-deploy

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The script uploads project archives to a third-party endpoint (codex-deploy-skills.vercel.sh) rather than directly interfacing with official Vercel CLI credentials or APIs, representing an unauthorized third-party proxy service.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script connects to an arbitrary third-party endpoint (codex-deploy-skills.vercel.sh) to execute project deployments and handle code material without verified official first-party governance.