# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | C |
| Finding counts | critical: 0 · high: 2 · medium: 1 · low: 1 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-22T20:28:00.739Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **high** [security] Remote content fetched into variable for execution
- **high** [security] Remote content fetched into variable for execution
- **medium** [security] References external URL — review for indirect prompt injection risk
- **low** [security] Script contacts a destination the documentation never mentions
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/vercel-labs/agent-skills/tree/main/skills/deploy-to-vercel |
| Assessed at | 2026-10-07T02:29:12.769Z |
| Published at | 2026-05-25T19:17:02.093Z |
| Public ID | 88e05707-4b5f-4806-a43f-57b56f0885d3 |
| Canonical page | https://vettd.agentichighway.ai/skill/88e05707-4b5f-4806-a43f-57b56f0885d3 |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> deploy-to-vercel

Description:

> Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".

Author:

> vercel

Version:

> 3.0.0

License:

> _not provided_