zeabur-port-mismatch
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and execute the latest version of the Zeabur CLI using
npx zeabur@latest. This is the official tool provided by the vendor for managing services. - [COMMAND_EXECUTION]: The skill uses various shell commands for system and network diagnosis, including
netstat -tlnpto check for active port listeners andzeabur service networkto verify port forwarding configurations. - [DYNAMIC_EXECUTION]: Provides a Python-based template to start a lightweight HTTP server in the background. This is used as a health-check mechanism for headless services and uses standard library modules (
http.server,json). - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data from external command-line outputs.
- Ingestion points: Terminal output from
zeaburCLI andnetstatcommands (SKILL.md). - Boundary markers: None; output is interpreted directly as diagnostic information.
- Capability inventory: Execution of
npx,python3, andnetstat(SKILL.md). - Sanitization: None; the agent is expected to parse standard CLI output.
Audit Metadata