Install
$ agentstack add skill-tommylower-cortex-vercel-deploy ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Vercel Deploy
Use this for deployment workflow, not design work. Default to preview deployments unless the user explicitly asks for production.
What Vercel Deployment Does
Vercel can deploy in two common ways:
- Git integration: pushing a branch triggers a Vercel build. Non-production branches produce preview URLs; the production branch produces the production deployment.
- CLI deployment:
vercel deployuploads the current project and returns a deployment URL. This is useful for unlinked projects, prototypes, or repos without git integration.
Linking creates .vercel/project.json or .vercel/repo.json, which tells the CLI which Vercel project/team the local repo belongs to.
Initial Checks
Run these before choosing a path:
git remote get-url origin 2>/dev/null
cat .vercel/project.json 2>/dev/null || cat .vercel/repo.json 2>/dev/null
vercel whoami 2>/dev/null
vercel teams list --format json 2>/dev/null
If multiple teams are available and the project is not already linked, ask which team slug to use. If .vercel/ already exists, use the linked org/project.
Preferred Flow
- If the project is linked and has a git remote, ask before committing or pushing.
- Commit intentionally, push the branch, and let Vercel create the preview deployment.
- Use
vercel ls --format jsonor the git provider checks to find the preview URL.
CLI Flow
Use CLI deploy when there is no git remote or the user explicitly wants direct deployment:
vercel deploy -y --no-wait
vercel inspect
Production deploys require explicit user wording:
vercel deploy --prod -y --no-wait
Token-Based Flow
If using a token, prefer VERCEL_TOKEN in the environment. Do not pass tokens through command-line flags.
export VERCEL_TOKEN=""
vercel deploy -y --no-wait
If available, also export both project variables:
export VERCEL_ORG_ID=""
export VERCEL_PROJECT_ID=""
Safety Rules
- Preview by default.
- Never push, create production deployments, or modify Vercel environment variables without explicit user intent.
- Never commit
.envfiles or token values. - Do not rely on interactive commands when a non-interactive flag or state check exists.
- If a build fails after adding dev tools, inspect top-level imports for dev-only packages first.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: tommylower
- Source: tommylower/cortex
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.