Source profileQuality 86/100Review permissions

vellum-ai/vellum-assistant/skills/deploy-fullstack-vercel/SKILL.md

deploy-fullstack-vercel

Build and deploy a full-stack app (React frontend + Python/FastAPI backend) or a Vellum app to Vercel as a serverless demo with seeded data

Source repository stars
1,002
Declared platforms
0
Static risk flags
3
Last source update
2026-08-04
Source checked
2026-08-04

Decision brief

What it does—and where it fits

Deploy a full-stack app with a React/Vite frontend and Python/FastAPI backend to Vercel as a serverless demo, OR deploy a Vellum-built app from the library. No auth required - meant for demos, portfolio pieces, and quick showcases.

Best for

  • User says "deploy this to Vercel", "host this", "publish this"
  • User has a project with a frontend + backend they want live
  • User wants to deploy a Vellum app that uses backend features (data store, custom routes)

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexNot declaredNo explicit evidencePortability before use
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/vellum-ai/vellum-assistant --skill "skills/deploy-fullstack-vercel"
Safe inspection promptEditorial

Inspect the Agent Skill "deploy-fullstack-vercel" from https://github.com/vellum-ai/vellum-assistant/blob/32b93fb5c0f5e77d2a15e2f214d3726208c9d208/skills/deploy-fullstack-vercel/SKILL.md at commit 32b93fb5c0f5e77d2a15e2f214d3726208c9d208. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    1. Detect Vellum Bridge Usage

    Check the compiled app for Vellum bridge API usage:

    Check the compiled app for Vellum bridge API usage:If found, the app depends on the Vellum bridge and needs a shim to work standalone.
  2. 02

    When to Use

    User says "deploy this to Vercel", "host this", "publish this"

    User says "deploy this to Vercel", "host this", "publish this"User has a project with a frontend + backend they want liveUser wants to deploy a Vellum app that uses backend features (data store, custom routes)
  3. 03

    Authentication

    For publishing Vellum apps from the library, use the built-in publishpage tool. This is the preferred path — it uses the stored Vercel API token (vercel/apitoken) via the brokered publish flow without exposing the token to shell commands.

    Install the Vercel CLI with bun install -g vercel (not npm — npm is not available in the sandbox).Use vercel login to authenticate interactively (opens browser for the user).If the user does not want to use CLI auth, stop and ask them for an approved deployment path. Do not extract, inject, or shell with the stored API token.
  4. 04

    Vellum App Publishing

    For publishing Vellum apps from the library, use the built-in publishpage tool. This is the preferred path — it uses the stored Vercel API token (vercel/apitoken) via the brokered publish flow without exposing the token to shell commands.

    For publishing Vellum apps from the library, use the built-in publishpage tool. This is the preferred path — it uses the stored Vercel API token (vercel/apitoken) via the brokered publish flow without exposing the token…The stored Vercel API token is reserved for brokered publishpage and unpublishpage actions only. Do not pass it to bash, curl, Vercel CLI commands, or proxy credential injection. Do not use networkmode: "proxied" with c…
  5. 05

    Custom Full-Stack Deployments

    For custom projects that need Vercel deployment (not Vellum app publishing):

    Install the Vercel CLI with bun install -g vercel (not npm — npm is not available in the sandbox).Use vercel login to authenticate interactively (opens browser for the user).If the user does not want to use CLI auth, stop and ask them for an approved deployment path. Do not extract, inject, or shell with the stored API token.

Permission review

Static risk signals and limitations

Writes files

medium · line 45

The documentation asks the agent to create, modify, or delete local files.

The app uses `window.vellum.*` APIs that are normally injected by the Vellum viewer. For standalone deployment, create a `vellum-shim.js` file in the app's `dist/` directory that provides browser-native replacements.

Writes files

medium · line 79

The documentation asks the agent to create, modify, or delete local files.

Create a `vercel.json` in the dist directory:

Runs scripts

medium · line 100

The documentation asks the agent to run terminal commands or scripts.

bun install

Network access

medium · line 229

The documentation includes network, browsing, or remote request actions.

curl -s <deployed-url>/api/health

Runs scripts

medium · line 250

The documentation asks the agent to run terminal commands or scripts.

bun install -g vercel # Install

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score86/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars1,002SourceRepository attention, not individual Skill quality
Compatibility0 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
vellum-ai/vellum-assistant
Skill path
skills/deploy-fullstack-vercel/SKILL.md
Commit
32b93fb5c0f5e77d2a15e2f214d3726208c9d208
License
MIT
Collected
2026-08-04
Default branch
main
View the original SKILL.md

Deploy Fullstack to Vercel

Deploy a full-stack app with a React/Vite frontend and Python/FastAPI backend to Vercel as a serverless demo, OR deploy a Vellum-built app from the library. No auth required - meant for demos, portfolio pieces, and quick showcases.

When to Use

  • User says "deploy this to Vercel", "host this", "publish this"
  • User has a project with a frontend + backend they want live
  • User wants to deploy a Vellum app that uses backend features (data store, custom routes)
  • User wants a quick demo deployment (no persistent database needed)

Authentication

Vellum App Publishing

For publishing Vellum apps from the library, use the built-in publish_page tool. This is the preferred path — it uses the stored Vercel API token (vercel/api_token) via the brokered publish flow without exposing the token to shell commands.

The stored Vercel API token is reserved for brokered publish_page and unpublish_page actions only. Do not pass it to bash, curl, Vercel CLI commands, or proxy credential injection. Do not use network_mode: "proxied" with credential_ids for Vercel deployments.

Custom Full-Stack Deployments

For custom projects that need Vercel deployment (not Vellum app publishing):

  1. Install the Vercel CLI with bun install -g vercel (not npm — npm is not available in the sandbox).
  2. Use vercel login to authenticate interactively (opens browser for the user).
  3. If the user does not want to use CLI auth, stop and ask them for an approved deployment path. Do not extract, inject, or shell with the stored API token.

Deploying a Vellum App

When the user asks to deploy a Vellum app from their library (from /workspace/data/apps/<app-name>/):

1. Detect Vellum Bridge Usage

Check the compiled app for Vellum bridge API usage:

grep -l "window\.vellum\.\|vellum\.fetch\|vellum\.data\|vellum\.sendAction" /workspace/data/apps/<app-name>/dist/*.js /workspace/data/apps/<app-name>/dist/*.html 2>/dev/null

If found, the app depends on the Vellum bridge and needs a shim to work standalone.

2. Create Vellum Bridge Shim

The app uses window.vellum.* APIs that are normally injected by the Vellum viewer. For standalone deployment, create a vellum-shim.js file in the app's dist/ directory that provides browser-native replacements.

Before writing the shim, read the app's compiled JavaScript (dist/main.js or equivalent) to understand exactly which window.vellum.* APIs the app calls and what data shapes it expects. The shim must match the app's actual usage — don't guess at signatures.

Common APIs to shim (implement only what the app actually uses):

Bridge APIStandalone replacementNotes
vellum.data.query()localStorage-backed storeRead the app code to determine the record shape — some apps expect {id, data: {...}} wrappers, others use flat records
vellum.data.create(...)localStorage insert with crypto.randomUUID()Match the argument signature the app passes (some pass a payload, others pass {id, ...fields})
vellum.data.update(...)localStorage updateMatch the argument signature (typically (id, payload))
vellum.data.delete(...)localStorage deleteTypically (id)
vellum.fetch(path, opts)console.warn + return empty success ResponseCustom routes aren't available standalone
vellum.sendAction(id, data)No-op with console.warnSurface actions aren't available standalone
vellum.openLink(url)window.open(url, '_blank')
vellum.widgets.toast(msg)Create a temporary styled <div> that auto-dismisses
vellum.routenullDeep-link routes aren't available standalone

Structure: Wrap everything in an IIFE that guards against the real bridge: (function() { if (window.vellum) return; ... })();

3. Inject the Shim into index.html

Add a <script src="vellum-shim.js"></script> tag in dist/index.html BEFORE any <script type="module"> tags:

sed -i 's|<script type="module"|<script src="vellum-shim.js"></script>\n<script type="module"|' dist/index.html

4. Deploy the App

cd /workspace/data/apps/<app-name>/dist

Create a vercel.json in the dist directory:

{
  "rewrites": [
    {
      "source": "/((?!main\\.js|main\\.css|vellum-shim\\.js|assets/).*)",
      "destination": "/index.html"
    }
  ]
}

Then deploy using the publish_page tool (preferred). For Vellum apps, use the built-in app publish flow rather than raw Vercel API calls from shell.

Deploying a Custom Full-Stack Project

1. Build the Frontend

cd <project>/frontend
bun install
bunx vite build

This produces static files in frontend/dist/.

2. Create the Vercel Deploy Directory

<project>/vercel-deploy/
├── api/
│   ├── index.py          ← FastAPI app wrapper (entry point)
│   ├── database.py        ← DB config (use /tmp for SQLite)
│   ├── models.py
│   ├── schemas.py
│   ├── seed_data.py       ← Must seed ALL required data (users, etc.)
│   ├── routers/
│   │   ├── __init__.py
│   │   └── *.py
│   └── requirements.txt   ← Python deps (fastapi, sqlalchemy, pydantic)
├── index.html             ← From frontend/dist/
├── assets/                ← From frontend/dist/assets/
└── vercel.json

Key steps:

mkdir -p <project>/vercel-deploy/api

# Copy frontend build output to deploy root
cp -r <project>/frontend/dist/* <project>/vercel-deploy/

# Copy backend files into api/
cp <project>/backend/models.py <project>/vercel-deploy/api/
cp <project>/backend/database.py <project>/vercel-deploy/api/
cp <project>/backend/schemas.py <project>/vercel-deploy/api/
cp <project>/backend/seed_data.py <project>/vercel-deploy/api/
cp -r <project>/backend/routers <project>/vercel-deploy/api/
cp <project>/backend/requirements.txt <project>/vercel-deploy/api/

3. Create api/index.py (Serverless Entry Point)

import sys, os
sys.path.insert(0, os.path.dirname(__file__))

from fastapi import FastAPI
from fastapi.middleware.cors import CORSMiddleware
from database import engine, Base, SessionLocal
from seed_data import seed_exercises, seed_default_user  # all seed functions
from routers import users, exercises, workouts, schedule, progress

# Create tables and seed on EVERY cold start
Base.metadata.create_all(bind=engine)
db = SessionLocal()
try:
    seed_exercises(db)
    seed_default_user(db)  # IMPORTANT: seed all required data
finally:
    db.close()

app = FastAPI(title="MyApp")

app.add_middleware(
    CORSMiddleware,
    allow_origins=["*"],
    allow_credentials=True,
    allow_methods=["*"],
    allow_headers=["*"],
)

app.include_router(users.router)
# ... other routers

@app.get("/api/health")
def health_check():
    return {"status": "ok"}

4. Update database.py for Vercel

Critical: Vercel serverless functions can only write to /tmp. Update the SQLite path:

SQLALCHEMY_DATABASE_URL = "sqlite:////tmp/app.db"

5. Seed ALL Required Data

This is the #1 gotcha. Since /tmp is ephemeral, every cold start gets a fresh database. If your frontend assumes certain data exists (like user ID 1), you MUST seed it:

def seed_default_user(db: Session):
    count = db.query(UserProfile).count()
    if count > 0:
        return
    user = UserProfile(name="Demo User", ...)
    db.add(user)
    db.commit()

6. Create vercel.json

{
  "rewrites": [
    { "source": "/api/(.*)", "destination": "/api/index.py" },
    { "source": "/((?!assets/).*)", "destination": "/index.html" }
  ]
}

This routes:

  • /api/* → Python serverless function
  • Everything else → React SPA (index.html)

7. Deploy

cd <project>/vercel-deploy
vercel --yes --prod

8. Verify

curl -s <deployed-url>/api/health
# Should return: {"status":"ok"}

Gotchas & Limitations

IssueSolution
SQLite resets on cold startSeed ALL required data in index.py startup
No persistent storageAcceptable for demos. For production, use Vercel Postgres or Supabase
No authFine for demos/portfolios. Add auth layer for real apps
requirements.txt locationMust be inside api/ folder (next to index.py)
Module imports in routersUse sys.path.insert(0, os.path.dirname(__file__)) in index.py
CORSSet allow_origins=["*"] for demo deployments
--name flag deprecatedDon't use --name with Vercel CLI, just deploy from the directory
Vellum bridge APIsUse the vellum-shim.js to provide localStorage-backed data + no-op stubs
npm not availableUse bun install -g vercel to install Vercel CLI in sandbox

Vercel CLI Quick Reference

bun install -g vercel        # Install
vercel login                 # Authenticate (opens browser for user-mediated auth)
vercel --yes --prod          # Deploy to production (skip prompts)
vercel logs --project <name> # Check function logs

Alternatives

Compare before choosing

Computed 961,066

TencentCloudBase/CloudBase-AI-Toolkit

cloudbase-agent-python

Build production-ready AI agent backends using the CloudBase Agent Python SDK — create agents with LangGraph/CrewAI/LlamaIndex, serve them via FastAPI with AG-UI protocol streaming + OpenAI-compatible endpoints, add tools (bash, filesystem, MCP, code execution), memory (in-memory, TDAI, MySQL, MongoDB), observability (OpenTelemetry/Langfuse), and middleware (auth, logging). Use this skill when the user wants to create an AI agent server, build a chatbot backend, set up human-in-the-loop workflow

Computed 9123,781

alirezarezvani/claude-skills

code-to-prd

Reverse-engineer any codebase into a complete Product Requirements Document (PRD). Analyzes routes, components, state management, API integrations, and user interactions to produce business-readable documentation detailed enough for engineers or AI agents to fully reconstruct every page and endpoint. Works with frontend frameworks (React, Vue, Angular, Svelte, Next.js, Nuxt), backend frameworks (NestJS, Django, Express, FastAPI), and fullstack applications. Use when users mention: generate PRD,

Computed 9123,781

alirezarezvani/claude-skills

senior-fullstack

Fullstack development toolkit with project scaffolding for Next.js, FastAPI, MERN, and Django stacks, code quality analysis with security and complexity scoring, and stack selection guidance. Use when the user asks to "scaffold a new project", "create a Next.js app", "set up FastAPI with React", "analyze code quality", "audit my codebase", "what stack should I use", "generate project boilerplate", or mentions fullstack development, project setup, or tech stack comparison.

Computed 9618,447

teng-lin/notebooklm-py

notebooklm

Complete API for Google NotebookLM - full programmatic access including features not in the web UI. Create notebooks, add sources, generate all artifact types, download in multiple formats. Activates on explicit /notebooklm or intent like "create a podcast about X"