zeabur-template-publish
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses 'npx zeabur@latest' to fetch the official Zeabur CLI from the npm registry. This is a standard method for ensuring the latest version of the vendor's tool is used.
- [COMMAND_EXECUTION]: The skill executes shell commands using the Zeabur CLI to perform template management operations including creation, updates, and deletion.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local YAML files. While this creates a potential surface for indirect injection if the source files are untrusted, this processing is fundamental to the skill's purpose of template publishing.
Audit Metadata