Skills
skills/practicalswan/agent-skills/vercel-deploy/Gen Agent Trust Hub

vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to facilitate project deployments.
  • Evidence: Uses the vercel deploy command to trigger project builds via the official CLI.
  • Evidence: Executes a bundled bash script scripts/deploy.sh to handle framework detection, packaging, and fallback deployment logic.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations to interact with Vercel's deployment infrastructure.
  • Evidence: Communicates with https://codex-deploy-skills.vercel.sh/api/deploy to upload project contents for deployment.
  • Evidence: Uses curl to poll resulting preview URLs for build completion status.
  • [DATA_EXFILTRATION]: Project source code is transmitted to a remote endpoint as a necessary step for deployment.
  • Evidence: The scripts/deploy.sh script archives project files into a tarball and uploads it to Vercel's API.
  • Evidence: Note: The script implements security precautions by explicitly excluding sensitive files such as .env, .env.*, and .git directories from the deployment package.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 06:07 PM
Security Audit — agent-trust-hub — vercel-deploy