zeabur-template

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external project metadata and configuration files to automate the creation of Zeabur templates. * Ingestion points: Analyzes docker-compose.yml, Dockerfile, and other repository contents provided by the user or fetched from remote sources. * Boundary markers: Does not define specific delimiters for processed data during template generation. * Capability inventory: Utilizes shell command execution (npx zeabur, docker buildx, curl), project deletion capabilities, and service execution tools. * Sanitization: No specific validation or escaping mechanisms are described for the processed external configuration.
  • [EXTERNAL_DOWNLOADS]: Fetches documentation and schema definitions from the official Zeabur GitHub repository and app domain. It also invokes the Zeabur CLI through npx, which downloads the package from the official registry.
  • [COMMAND_EXECUTION]: Employs shell commands to build and push Docker images, interact with the Zeabur API, and debug services through direct container execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:30 PM