zeabur-server-list
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Zeabur CLI (
npx zeabur@latest) to perform server management operations such as listing, getting details, and rebooting servers. - [EXTERNAL_DOWNLOADS]: The use of
npxfacilitates the download and execution of thezeaburpackage from the npm registry. This is the official tool from the vendor 'zeabur'. - [REMOTE_CODE_EXECUTION]: The skill enables remote command execution on dedicated servers via the
zeabur server sshcommand. This is a core administrative feature for the intended use case. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing output from remote SSH sessions (e.g., MOTD or command results), which could theoretically contain instructions intended to influence the agent.
- Ingestion points: Remote server output and MOTD banners ingested via
npx zeabur@latest server sshinSKILL.md. - Boundary markers: No explicit boundary markers or 'ignore' instructions are provided for remote output.
- Capability inventory: Subprocess execution via
npxand shell piping inSKILL.md. - Sanitization: Suggests basic text filtering (grep) for MOTD usability, but lacks security-focused sanitization of remote data.
Audit Metadata