deploy-to-vercel

Warn

Audited by Snyk on Mar 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill is primarily a safe deployment guide, but it explicitly recommends using "sudo npm install -g vercel" as a fallback for permission errors, which encourages obtaining elevated privileges on the machine and thus poses a security concern.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 18, 2026, 07:14 AM
Issues
1
Security Audit — snyk — deploy-to-vercel