vercel-agent-deploy-to-vercel
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses standard shell commands such as
gitand thevercelCLI to determine project state and trigger deployments. It also executes local helper scripts (deploy.shanddeploy-codex.sh) to handle packaging and uploads in sandboxed environments. - [EXTERNAL_DOWNLOADS]: Includes instructions to install the official Vercel CLI globally using
npm install -g vercelif it is not already present. - [DATA_EXFILTRATION]: Transmits project source code to Vercel's official deployment endpoints (
claude-skills-deploy.vercel.comandcodex-deploy-skills.vercel.sh). The included scripts proactively mitigate data exposure by usingtar --excludeto ensure.envfiles are not uploaded.
Audit Metadata