zeabur-deployment

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and execute the @zeabur/mcp-server package using npx. This is an official tool from Zeabur, a well-known platform-as-a-service provider, intended to grant the agent capability to manage services on that platform.
  • [COMMAND_EXECUTION]: Instructions are included to execute CLI commands for adding the MCP server to the agent's environment. These are standard operations for integrating project-specific tools.
  • [CREDENTIALS_UNSAFE]: The skill documentation refers to the ZEABUR_TOKEN API key. It correctly identifies this as sensitive information and provides explicit warnings to the user to avoid hardcoding the token, committing it to version control, or sharing it in public logs. It also advises on revocation if the token is accidentally exposed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:58 PM
Security Audit — agent-trust-hub — zeabur-deployment