zeabur-server-catalog
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx zeabur@latest, which downloads the latest version of the Zeabur CLI from the official NPM registry. This is a standard and expected method for utilizing the vendor's command-line interface. - [COMMAND_EXECUTION]: Shell commands are used to invoke the Zeabur CLI (
zeabur server catalogandzeabur server rent). These commands are limited to retrieving dedicated server catalog data and managing server instances through the vendor's platform. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data generated by the CLI.
- Ingestion points: Data enters the agent's context from the output of
zeabur server catalogcommands. - Boundary markers: None explicitly defined, though the output is expected to be in structured JSON format.
- Capability inventory: The skill's capabilities are restricted to executing specific
zeaburCLI commands; it does not contain arbitrary file-write or unrestricted network operations. - Sanitization: The agent is instructed to parse structured JSON data, which reduces the risk of command or prompt injection compared to processing free-form text.
Audit Metadata