vercel-deploy

Warn

Audited by Socket on Jun 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent with deploying to Vercel, and the claimable-preview flow appears plausible based on official Vercel features. But the decisive behavior lives in an unseen shell script that uploads local project data off-machine, claims unusual unauthenticated deployment, and may require escalated network access, so the actual data flow cannot be fully verified from the provided skill alone.

Confidence: 80%Severity: 56%
Audit Metadata
Analyzed At
Jun 30, 2026, 08:28 PM
Package URL
pkg:socket/skills-sh/SZoloth%2Fskills%2Fvercel-deploy%2F@73880c4fd72db5da2c65fb4d5ff6a6918ce084e82d1cd5e637d9daf92c9ddf86
Security Audit — socket — vercel-deploy