vercel-deploy

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The script packages and uploads the user's project (excluding node_modules and .git) to an external, unauthenticated endpoint (https://codex-deploy-skills.vercel.sh/api/deploy), which can silently exfiltrate sensitive files (env vars, keys, credentials) — a high-risk data exfiltration behavior even though there is no obfuscated backdoor or RCE code.