deploy-to-vercel
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions suggest running
sudo npm install -g vercelto resolve permission errors during CLI installation. Executing commands with superuser privileges introduces significant security risks. - [EXTERNAL_DOWNLOADS]: The skill installs the
vercelpackage from the official npm registry. Vercel is a well-known service for web deployment. - [INDIRECT_PROMPT_INJECTION]: The skill processes local application code and executes build scripts (
npm run build), which creates an attack surface where malicious instructions hidden in the project files could influence agent behavior or execute unwanted code. - Ingestion points: Next.js application source code and configuration files.
- Boundary markers: None present.
- Capability inventory: Execution of shell commands via Bash (npm, vercel, dig).
- Sanitization: No validation or filtering is performed on the content of the project scripts before execution.
- [COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to run build, deployment, and diagnostic commands such as
npm,vercel, anddig.
Recommendations
- AI detected serious security threats
Audit Metadata