zeabur-domain-url
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
npx zeabur@latestto manage domains and list servers. These are standard operations for the Zeabur CLI. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npx zeabur@latest, which downloads the latest version of the Zeabur CLI from the NPM registry. This is the recommended invocation method provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided service IDs and domain names into CLI commands. 1. Ingestion points: User-provided
<service-id>and<domain>values inSKILL.md. 2. Boundary markers: None explicitly mentioned for input wrapping, though the CLI is run in non-interactive mode (-i=false). 3. Capability inventory: Execution of shell commands vianpxand network access through the CLI tool. 4. Sanitization: The skill describes validation rules for domain prefixes (minimum 3 characters, no dots) to prevent malformed requests.
Audit Metadata