zeabur-email
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx zeabur@latestto download the official Zeabur CLI tool from the public NPM registry. This is a standard method for ensuring the latest version of a vendor's tool is used. - [REMOTE_CODE_EXECUTION]: The skill executes the downloaded Zeabur CLI tool to perform management tasks such as service status checks and domain verification.
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the vendor's official API atapi.zeabur.comfor sending emails and manages service configurations through thezeaburCLI. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied content when sending emails through the API.
- Ingestion points: Data for email fields (to, subject, html, text) in
SKILL.md. - Boundary markers: Not present (standard JSON structure used).
- Capability inventory: CLI execution (
npx), Network requests (curl). - Sanitization: Relies on the vendor's API and user oversight for content validation.
Audit Metadata