zeabur-server-ssh
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and executes the official Zeabur CLI from the NPM registry using
npx zeabur@latest.\n- [COMMAND_EXECUTION]: Executes local CLI commands to list servers and fetch sensitive connection details.\n- [REMOTE_CODE_EXECUTION]: Implements remote command execution on the user's server via SSH, using either thesshpassutility or a dynamically generated Node.js script with thessh2library.\n- [CREDENTIALS_UNSAFE]: Automates the retrieval and programmatic use of server credentials (IP address, port, username, and password) for establishing remote connections.\n- [COMMAND_EXECUTION]: Recommends the use ofStrictHostKeyChecking=noduring SSH connections, which bypasses the verification of the remote host's identity.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. 1. Ingestion points: Reads pod logs and resource descriptions (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Local command execution (npx), dynamic script execution (node -e), and remote command execution (SSH/kubectl). 4. Sanitization: Absent.
Audit Metadata