deploy-on-vercel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow in scripts/deploy.sh reads outsider-authored free text from the user-supplied project directory path (INPUT_PATH) by executing cat "$PROJECT_PATH/package.json" (and potentially find/tar packaging) before POSTing a tarball to https://claude-skills-deploy.vercel.com/api/deploy.