vercel-deploy
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits project source code to
https://deploy-skills.vercel.sh/api/deployfor the purpose of hosting. This operation is the primary function of the skill, and the target is a well-known service domain associated with Vercel. - [COMMAND_EXECUTION]: The skill utilizes local system utilities (such as
tarandcurl) and the Vercel CLI to package and upload project files. These operations are conducted within the scope of the user's project directory. - [SAFE]: The
scripts/deploy.shscript demonstrates security awareness by explicitly excluding sensitive directories and files, including.git,node_modules, and environment variable files (.env,.env.*), which prevents accidental credential leakage during the deployment process.
Audit Metadata