deploy-to-vercel

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFE
Full Analysis
  • Command Execution: The skill instructions guide the agent to use standard CLI tools for version control and deployment management.
  • Executes git commands to manage remotes and push changes.
  • Utilizes the vercel CLI for project linking, team management, and direct deployments.
  • Network Operations: The skill includes utility scripts that communicate with Vercel infrastructure to facilitate deployments in sandboxed environments.
  • Resources deploy.sh and deploy-codex.sh perform POST requests to https://claude-skills-deploy.vercel.com/api/deploy and https://codex-deploy-skills.vercel.sh/api/deploy.
  • These operations are used to upload project archives for processing on the Vercel platform.
  • External Dependencies: The skill identifies the Vercel CLI as a required tool for full functionality.
  • Recommends installation via npm install -g vercel, which is the standard method for obtaining the official vendor tool.
  • Data Protection: The deployment scripts incorporate logic to ensure sensitive local information is not inadvertently uploaded.
  • The tar packaging commands specifically exclude .env, .env.*, and .git directories.
  • This practice aligns with security recommendations to prevent the exposure of secrets and credentials during deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 02:34 PM