vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script to manage the deployment workflow.
- Uses the
tarutility to package project files into a compressed archive. - Explicitly excludes
node_modulesand.gitdirectories from the deployment package. - [DATA_EXFILTRATION]: The skill transmits project source code to an external deployment service.
- Files are uploaded via an HTTP POST request to
claude-skills-deploy.vercel.com. - This operation is the primary purpose of the skill and targets a well-known technology provider (Vercel).
- [EXTERNAL_DOWNLOADS]: Performs network operations using
curlto interact with Vercel's deployment API. - The network communication is directed to an official Vercel domain, which is a recognized and trusted service.
Audit Metadata