vercel-deploy

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
3
Flagged
3
Chunks
3
Flagged Files (3)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: vercel-deploy description: Deploy applications and websites to Vercel with a claimable preview.

openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: openai.yaml Description: interface: display_name: Vercel Deploy short_description: Deploy applications and websites to Vercel with a claimable preview.

scripts/deploy.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/deploy.sh Description: #!/bin/bash # Vercel Deployment Script (via claimable deploy endpoint) # Usage: ./deploy.sh [project-path] # Returns: JSON with previewUrl, claimUrl, deploymentId, projectId set -e DEPLOY_ENDPOINT="https://codex-deploy-skills.vercel.sh/api/deploy" # Detect framework from package.json detect_framework() { local pkg_json="$1" if [ !

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
3
Files Flagged
3
Chunks Analyzed
3
Analyzed
Feb 21, 2026, 08:54 AM
Security Audit — runlayer — vercel-deploy