zeabur-domain-register

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx zeabur@latest to run the latest version of the Zeabur CLI. This results in the agent downloading and executing a package from the NPM registry.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to search for, purchase, and manage domains.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where user-supplied information (e.g., registrant name, email, and address) is interpolated into CLI commands. The ingestion points are located in SKILL.md under the profile creation and contact update sections. While boundary markers and explicit sanitization are not defined in the skill instructions, this input is required for domain registration functionality. The agent's capabilities include shell execution via the CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:29 PM