vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script to manage the deployment workflow.
  • Uses the tar utility to package project files into a compressed archive.
  • Explicitly excludes node_modules and .git directories from the deployment package.
  • [DATA_EXFILTRATION]: The skill transmits project source code to an external deployment service.
  • Files are uploaded via an HTTP POST request to claude-skills-deploy.vercel.com.
  • This operation is the primary purpose of the skill and targets a well-known technology provider (Vercel).
  • [EXTERNAL_DOWNLOADS]: Performs network operations using curl to interact with Vercel's deployment API.
  • The network communication is directed to an official Vercel domain, which is a recognized and trusted service.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 12:44 PM