vercel-deploy
Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".
89
85%
Does it follow best practices?
Impact
96%
2.23xAverage score across 3 eval scenarios
Critical
Do not install without reviewing
Security
1 critical severity finding. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E006: Malicious code pattern detected in skill scripts
What this means
Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.
Why it was flagged
Malicious code pattern detected (high risk: 0.90). The skill includes a hard-coded, non-official deploy endpoint to which it uploads a complete project tarball (potentially exfiltrating source code and embedded secrets) and requests escalated network permissions for the deploy, which together constitute a high-risk data-exfiltration/backdoor pattern even though there is no obfuscated code or remote shell present.
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.80). The skill's deploy script (scripts/deploy.sh) POSTs the user project to the external endpoint https://codex-deploy-skills.vercel.sh/api/deploy, parses the untrusted JSON response for previewUrl/claimUrl, and then polls the resulting public preview URL (the deployed site), so the agent ingests and acts on arbitrary third-party/user-generated content from those public endpoints.
- Repository
- foryourhealth111-pixel/Vibe-Skills
- Commit
d5ae560
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.