vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The skill packages the contents of the target project directory and uploads the resulting archive to Vercel's official deployment service at https://claude-skills-deploy.vercel.com/api/deploy. While the script excludes node_modules and .git directories, it will include all other files in the project folder, such as .env files or other sensitive configuration documents, as part of the standard deployment process.
  • [COMMAND_EXECUTION]: The deploy.sh script utilizes standard system utilities including tar to archive project files, and find and mv to identify and rename static HTML entry points when necessary.
  • [EXTERNAL_DOWNLOADS]: The skill performs an outbound network request using curl to upload project data to Vercel's API and retrieve deployment metadata. This interaction is directed toward Vercel's official infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 06:21 PM