vercel-deploy

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill transmits project source code to https://deploy-skills.vercel.sh/api/deploy for the purpose of hosting. This operation is the primary function of the skill, and the target is a well-known service domain associated with Vercel.
  • [COMMAND_EXECUTION]: The skill utilizes local system utilities (such as tar and curl) and the Vercel CLI to package and upload project files. These operations are conducted within the scope of the user's project directory.
  • [SAFE]: The scripts/deploy.sh script demonstrates security awareness by explicitly excluding sensitive directories and files, including .git, node_modules, and environment variable files (.env, .env.*), which prevents accidental credential leakage during the deployment process.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 02:03 AM