vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: Uploads project source code to the external endpoint https://codex-deploy-skills.vercel.sh/api/deploy to facilitate the deployment process. This operation is the primary function of the skill and is clearly documented for the user.
- [COMMAND_EXECUTION]: Utilizes system commands including tar, curl, find, and mv to package project files, detect frameworks, and perform the deployment upload.
- [DATA_EXFILTRATION]: Implements security best practices by explicitly excluding sensitive directories and files, such as .git, .env, and .env.*, from the deployment package sent to the external service.
Audit Metadata