zeabur-project-create
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx zeabur@latest, which downloads and executes the latest version of the Zeabur CLI from the NPM registry. As this is the official tool from the skill's author, it is considered a legitimate operational dependency. - [COMMAND_EXECUTION]: The skill utilizes shell commands to perform administrative tasks such as listing servers, creating projects, and deploying templates via the Zeabur CLI tool. These actions are within the intended scope of project management.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes server information from the Zeabur API, creating a surface for indirect prompt injection if server metadata (e.g., names) contains malicious instructions. 1. Ingestion points: JSON output from
npx zeabur@latest server list(SKILL.md). 2. Boundary markers: None present to distinguish API data from instructions. 3. Capability inventory: Shell execution for project creation and template deployment. 4. Sanitization: No explicit sanitization or validation of the server list data before presentation to the user.
Audit Metadata