deploy-to-vercel
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Service Interaction: The skill communicates with Vercel's infrastructure to perform deployments. It uses official domains, including vercel.com and vercel.sh, which are consistent with its primary purpose as a deployment tool.
- Sensitive File Handling: The included deployment scripts feature logic to automatically exclude sensitive files and directories, such as
.envand.git, when creating the project tarball for upload. This helps prevent the accidental exposure of secrets or repository metadata. - Command Execution: The skill relies on standard development utilities such as
git,tar,curl, and thevercelCLI to detect project state, package files, and manage the deployment lifecycle. - CLI Installation: In environments where the Vercel CLI is missing, the skill provides instructions to install the package via
npm. This is a routine procedure for enabling Vercel-specific functionality. - User Confirmation Workflows: The instructions require the agent to seek explicit approval from the user before executing certain actions, such as pushing code to a remote git repository.
Audit Metadata