zeabur-server-catalog

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx zeabur@latest, which downloads the latest version of the Zeabur CLI from the official NPM registry. This is a standard and expected method for utilizing the vendor's command-line interface.
  • [COMMAND_EXECUTION]: Shell commands are used to invoke the Zeabur CLI (zeabur server catalog and zeabur server rent). These commands are limited to retrieving dedicated server catalog data and managing server instances through the vendor's platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data generated by the CLI.
  • Ingestion points: Data enters the agent's context from the output of zeabur server catalog commands.
  • Boundary markers: None explicitly defined, though the output is expected to be in structured JSON format.
  • Capability inventory: The skill's capabilities are restricted to executing specific zeabur CLI commands; it does not contain arbitrary file-write or unrestricted network operations.
  • Sanitization: The agent is instructed to parse structured JSON data, which reduces the risk of command or prompt injection compared to processing free-form text.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:29 PM