The Agent Skills Directory

Command Execution: The skill executes several shell commands to manage deployments, including git, vercel CLI commands, and project packaging with tar. These are necessary for the skill's primary function of deploying applications.
External Network Operations: The deployment scripts (deploy.sh and deploy-codex.sh) use curl to upload project tarballs to Vercel-managed endpoints (codex-deploy-skills.vercel.sh and claude-skills-deploy.vercel.com). This is a fundamental part of the deployment process to Vercel's infrastructure.
Indirect Prompt Injection Surface: The skill processes local project data (e.g., package.json and directory contents) and interpolates this into deployment commands. While it excludes sensitive files like .env and .git during packaging, the ingestion of untrusted local data is a standard consideration for agent-based tools.
Tool Installation: The skill may prompt for or perform installation of the Vercel CLI via npm install -g vercel. This is standard practice for tools requiring a specific CLI for their operations.

deploy-to-vercel