zeabur-deployment-logs
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and executes the official Zeabur CLI tool via
npx zeabur@latest. This is a standard vendor-provided method for managing services on the Zeabur platform. - [COMMAND_EXECUTION]: Provides instructions to execute shell commands for listing services, listing deployments, and fetching logs. The commands include standard piping techniques like
tail -50andgrepto manage output volume. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection by processing raw log data from runtime and build environments.
- Ingestion points: Service runtime and build logs retrieved via the
deployment logcommand inSKILL.md. - Boundary markers: Absent; the instructions do not provide delimiters or specific "ignore" markers for log content.
- Capability inventory: The skill uses subprocess execution via the
npxcommand. - Sanitization: Absent; logs are piped directly from stdout/stderr to the agent's context without filtering for potential instructions.
Audit Metadata