zeabur-service-exec
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of arbitrary shell commands inside a running service container using the
service execfunctionality. - This includes examples for listing files, checking environment variables, and reading configuration files which provides a broad capability for container interaction.
- [EXTERNAL_DOWNLOADS]: The skill explicitly instructs the agent to use
npx zeabur@latestto invoke the Zeabur CLI. - This downloads and executes the latest version of the
zeaburpackage from the official npm registry at runtime. - As the package is owned by the skill's author ('zeabur'), this is considered a standard vendor resource and does not present an unusual security risk.
- [DATA_EXFILTRATION]: While the skill's primary purpose is debugging, it provides instructions for accessing potentially sensitive information.
- Examples include reading environment variables (like
DATABASE_URL) and application configuration files (/app/config.json), which could be leveraged by an agent to expose credentials if instructed to do so.
Audit Metadata