vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill packages the contents of the target project directory and uploads the resulting archive to Vercel's official deployment service at
https://claude-skills-deploy.vercel.com/api/deploy. While the script excludesnode_modulesand.gitdirectories, it will include all other files in the project folder, such as.envfiles or other sensitive configuration documents, as part of the standard deployment process. - [COMMAND_EXECUTION]: The
deploy.shscript utilizes standard system utilities includingtarto archive project files, andfindandmvto identify and rename static HTML entry points when necessary. - [EXTERNAL_DOWNLOADS]: The skill performs an outbound network request using
curlto upload project data to Vercel's API and retrieve deployment metadata. This interaction is directed toward Vercel's official infrastructure.
Audit Metadata