deploy-to-vercel

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the Vercel CLI from the npm registry to enable deployment capabilities.
  • [COMMAND_EXECUTION]: Executes shell commands to detect project framework, package assets, and interact with the Vercel CLI and Git.
  • [DATA_EXFILTRATION]: Packages and uploads project files to Vercel deployment APIs. The skill maintains security by explicitly excluding .env files and .git metadata from the upload payload.
  • [SAFE]: Uses official Vercel domains and follows standard development workflows. Data ingestion from package.json for framework detection is handled via string matching.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 05:47 AM
Security Audit — agent-trust-hub — deploy-to-vercel