zeabur-service-list

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill requires invoking "npx zeabur@latest", which causes the Zeabur package to be fetched from the npm registry (https://registry.npmjs.org/zeabur) and executed at runtime, meaning remote code is fetched-and-run and the skill relies on it.