Vercel Deployment Watchdog

Monitor Vercel-hosted site deployments with automated health checks, cache freshness verification, and API validation. Use when you need to ensure deployment...

This skill appears to be what it claims: a Vercel deployment monitor that needs curl, jq and a Vercel API token. Before installing or running it: 1) Review the included scripts yourself (they are plain shell) to confirm behavior. 2) Create a Vercel token with minimal scope (deployment:read) and keep it secure; do not use a token that grants build/deploy/write access unless needed. 3) Be cautious about enabling ALLOW_INTERNAL=true — that disables hostname/private-IP checks and allows probing internal addresses, which is dangerous unless you explicitly need it and have permission. 4) Note the default state file location (~/.openclaw/...) and change WATCHDOG_STATE_FILE if you want it stored elsewhere. 5) The package source/homepage is missing; if you will run this in production, prefer code from a known repository/maintainer or verify the origin. If you want, I can scan the remainder of the truncated script parts for any additional behavior (e.g., webhooks, external upload sinks) before you run it.

Type: OpenClaw Skill Name: vercel-deployment-watchdog Version: 1.0.0 The Vercel Deployment Watchdog skill is a legitimate utility for monitoring web application deployments. It uses the official Vercel API (api.vercel.com) to track deployment status and performs standard health checks (HTTP status, title verification, and JSON validation) on user-defined URLs. The scripts (watchdog-check.sh and vercel-monitor.sh) include proactive security features such as URL validation to prevent SSRF against internal networks and follow best practices like variable quoting and 'set -euo pipefail'. No evidence of data exfiltration, malicious execution, or prompt injection was found.