← Back to Skills Marketplace
Vercel
by
BrennerSpear
· GitHub ↗
· v1.0.0
6160
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install vercel-deployment
Description
Deploy and manage Vercel projects, including linking repositories, env vars, and domains.
Usage Guidance
Install this only if you want an agent to help manage Vercel projects. Before running its commands, confirm the target directory, Vercel account or team, GitHub repository, production environment, and any environment variable values; consider using a trusted or pinned Vercel CLI for sensitive projects.
Capability Analysis
Type: OpenClaw Skill
Name: vercel-deployment
Version: 1.0.0
The skill bundle primarily uses standard `npx vercel` commands for project deployment and management. While the commands themselves are legitimate, the `SKILL.md` file contains instructions that require the AI agent to substitute user-provided values (e.g., `<project-root>`, `VAR_NAME`, `value`). This creates a significant prompt injection vulnerability, as an attacker could craft malicious inputs for these placeholders, potentially leading to shell injection or unauthorized actions if the agent does not properly sanitize or validate them before execution. There is no direct evidence of intentional malicious code or data exfiltration within the provided files, but the potential for exploitation via prompt injection makes it suspicious.
Capability Assessment
Purpose & Capability
The documented capabilities match the stated purpose: linking Vercel projects, connecting Git repositories, adding environment variables, and listing domains. These can affect production deployments but are disclosed and purpose-aligned.
Instruction Scope
The skill is a short Markdown instruction file with visible command examples and ordinary placeholders for project paths, variable names, and values. The reference to a missing domains.md file is a minor completeness issue, not a security concern.
Install Mechanism
There is no executable installer or bundled code. Runtime use depends on npx vercel, an external CLI invocation expected for this purpose, though it is not version-pinned.
Credentials
Use of Vercel and GitHub project authority is proportionate to deployment management. Users should verify the active account, team, repository, project, and target environment before executing commands.
Persistence & Privilege
vercel link and vercel git connect can create persistent project and repository relationships, including auto-deploy behavior. That persistence is disclosed and aligned with the skill's purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vercel-deployment - After installation, invoke the skill by name or use
/vercel-deployment - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Auto-publish from CI
Metadata
Frequently Asked Questions
What is Vercel?
Deploy and manage Vercel projects, including linking repositories, env vars, and domains. It is an AI Agent Skill for Claude Code / OpenClaw, with 6160 downloads so far.
How do I install Vercel?
Run "/install vercel-deployment" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Vercel free?
Yes, Vercel is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Vercel support?
Vercel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Vercel?
It is built and maintained by BrennerSpear (@brennerspear); the current version is v1.0.0.
More Skills