🟡 Medium Risk Audited: Feb 5, 2026

vercel-skill

Deploy and manage Vercel projects. Automate deployment workflows with preview and production deployments.

View Repository →

📋 Audit Summary

Author kmh0301
Category DevOps
License Not specified
Dependencies vercel CLI (npm)
Install Command git clone https://github.com/kmh0301/clawdbot-vercel-skill.git

🔍 Security Analysis

⚠️ Shell Execution

Executes vercel CLI commands via shell scripts. Requires vercel CLI to be installed globally with user login credentials.

⚠️ Network & Credentials

Deploys to Vercel platform requiring authenticated access. Vercel token/credentials managed by CLI (vercel login).

✅ Simple Implementation

Minimal shell wrapper around vercel CLI. Clear argument passing, error handling with set -e flag.

✅ Deployment Controls

Supports --prod flag for explicit production deployments. Defaults to preview deployments for safety.

📦 Scripts

deploy.sh

Deploys to Vercel. Supports --prod flag for production. Uses --yes flag to skip prompts.

env-pull.sh

Pulls environment variables from Vercel project to local .env file.

6.0
Trust Score / 10
Medium Risk - External CLI dependency

🎯 Permissions

shell network credentials

✅ Best Practices

  • • Preview by default
  • • Explicit --prod flag
  • • Error handling (set -e)
  • • Minimal wrapper code

⚠️ Requirements

  • • vercel CLI installed
  • • vercel login completed
  • • Project linked to Vercel