vercel-deploy
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the main Vercel CLI path is coherent and low risk, but the skill includes an unreviewable local fallback deploy script that performs external deployment actions and may handle packaging, network calls, and claim-flow details off-screen. The overall footprint mostly fits the stated purpose, yet the opaque fallback and autonomous external deployment capability justify a cautious classification rather than benign.
Confidence: 82%Severity: 53%
Audit Metadata