zeabur-file
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads project files from the Zeabur platform to the local filesystem using the
npx zeabur@latest file pullcommand.- [COMMAND_EXECUTION]: The skill uses thenpxutility to execute the Zeabur CLI and utilizes common bash tools likels,cat, andfindto examine the downloaded files.- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: The agent is instructed to read the contents of files within the project pulled from an external upload, which are untrusted.\n
- Boundary markers: There are no markers or instructions in the skill to treat the file contents as potentially untrusted data or to ignore embedded instructions.\n
- Capability inventory: The agent has access to execute shell commands and is suggested to transition to the
zeabur-deployskill.\n - Sanitization: No sanitization or safety checks are performed on the file contents before the agent reads and processes them.
Audit Metadata