vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the official Vercel CLI (vercel) to manage deployments, environment variables, and rollbacks. These are standard operations for its stated purpose.
  • [CREDENTIALS_UNSAFE]: The skill explicitly instructs the agent to never echo secret environment variable values into the transcript and correctly notes that vercel env add handles values without echoing them.
  • [DATA_EXFILTRATION]: No unexpected network operations or data exfiltration patterns were detected. All network communication is conducted through the official Vercel CLI to Vercel's infrastructure.
  • [PROMPT_INJECTION]: The instructions do not contain attempts to override agent safety guidelines or bypass established constraints.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any remote code downloads or script executions. It relies on a pre-installed and authenticated Vercel CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 05:08 AM
Security Audit — agent-trust-hub — vercel-deploy