zeabur-domain-register
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx zeabur@latestto run the latest version of the Zeabur CLI. This results in the agent downloading and executing a package from the NPM registry. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to search for, purchase, and manage domains.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where user-supplied information (e.g., registrant name, email, and address) is interpolated into CLI commands. The ingestion points are located in SKILL.md under the profile creation and contact update sections. While boundary markers and explicit sanitization are not defined in the skill instructions, this input is required for domain registration functionality. The agent's capabilities include shell execution via the CLI.
Audit Metadata