Security Audit

vercel-labs/agent-skills:skills/claude.ai/vercel-deploy-claimable

github.com/vercel-labs/agent-skills

AI SkillCommit e23951b8cad2

TRUSTED

Scanned 12 days ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

vercel-labs/agent-skills:skills/claude.ai/vercel-deploy-claimable received a trust score of 80/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Sensitive Data Exfiltration via Tarball, Unsafe Modification of User Files.

The analysis covered 4 layers: manifest_analysis, llm_behavioral_safety, static_code_analysis, dependency_graph. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 8, 2026 (commit e23951b8). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

78%

Behavioral Risk Signals

Network Access

1 finding

Filesystem Write

2 findings

Security Findings2

Severity	Finding	Layer	Location
HIGH	Sensitive Data Exfiltration via Tarball The deployment script packages the entire project directory into a tarball to upload to an external service. It manually excludes 'node_modules' and '.git' but fails to respect '.gitignore' or exclude sensitive configuration files like '.env'. This results in the exfiltration of local secrets and API keys to the 'claude-skills-deploy.vercel.com' service, even if the user has properly git-ignored them. Use 'git archive' if available to respect .gitignore, or explicitly exclude sensitive patterns in the tar command: --exclude='.env' --exclude='.pem' --exclude='*.key'.	Unknown	scripts/deploy.sh:186
MEDIUM	Unsafe Modification of User Files The script automatically renames a single HTML file to 'index.html' within the user's source directory if no package.json is found. This modifies the user's file system in place, which can lead to data loss (overwriting an existing index.html if the logic check is bypassed or race conditions occur) or unexpected changes to the project structure. Instead of renaming the file in the source directory, copy the file to the temporary directory used for packaging and rename it there.	Unknown	scripts/deploy.sh:180

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/fa684fcf4ed983b7.svg)](https://skillshield.io/report/fa684fcf4ed983b7)