zeabur-server-list
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx zeabur@latest, which downloads and executes the latest version of the Zeabur CLI from the NPM registry. This is a standard mechanism for vendor-provided developer tools. - [COMMAND_EXECUTION]: The skill provides various commands for local execution to interact with the Zeabur API and remote execution via SSH to manage the user's servers. This includes non-interactive execution for automated workflows.
- [INDIRECT_PROMPT_INJECTION]: The agent processes output from remote SSH sessions, which could include system-generated text or command results. The skill suggests filtering known system banners to focus on relevant data. Ingestion of data from user-controlled servers is documented as a potential attack surface but is considered low risk in the context of official vendor tooling.
Audit Metadata