zeabur-file

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads project files from the Zeabur platform to the local filesystem using the npx zeabur@latest file pull command.- [COMMAND_EXECUTION]: The skill uses the npx utility to execute the Zeabur CLI and utilizes common bash tools like ls, cat, and find to examine the downloaded files.- [INDIRECT_PROMPT_INJECTION]:\n
  • Ingestion points: The agent is instructed to read the contents of files within the project pulled from an external upload, which are untrusted.\n
  • Boundary markers: There are no markers or instructions in the skill to treat the file contents as potentially untrusted data or to ignore embedded instructions.\n
  • Capability inventory: The agent has access to execute shell commands and is suggested to transition to the zeabur-deploy skill.\n
  • Sanitization: No sanitization or safety checks are performed on the file contents before the agent reads and processes them.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:29 PM