vercel-deploy

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the main Vercel CLI path is coherent and low risk, but the skill includes an unreviewable local fallback deploy script that performs external deployment actions and may handle packaging, network calls, and claim-flow details off-screen. The overall footprint mostly fits the stated purpose, yet the opaque fallback and autonomous external deployment capability justify a cautious classification rather than benign.

Confidence: 82%Severity: 53%
Audit Metadata
Analyzed At
Aug 18, 2026, 12:25 PM
Package URL
pkg:socket/skills-sh/seaworld008%2Fcommonly-used-high-value-skills%2Fvercel-deploy%2F@3a9f65a89d6c0ea71742afb0ff365a19b86af0ff7d00373d47acfa4f564a827a
Security Audit — socket — vercel-deploy