vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill runs the
vercelCLI tool and a specialized shell script (deploy.sh) to automate the packaging and deployment of project source code. - [EXTERNAL_DOWNLOADS]: The deployment script utilizes
curlto transmit project data tohttps://codex-deploy-skills.vercel.sh/api/deployand subsequently polls the resulting URL to monitor build progress. - [DATA_EXFILTRATION]: Although the skill performs network uploads, it adheres to security best practices by explicitly excluding
.envfiles and.gitdirectories from the deployment tarball, minimizing the risk of credential or metadata exposure.
Audit Metadata