The Agent Skills Directory

[SAFE]: The skill represents a collection of security best practices for server administration and follows the principle of least privilege throughout its configuration templates.
[COMMAND_EXECUTION]: The skill uses various shell commands (e.g., ss, ufw, docker) to configure, harden, and audit the VPS host. These operations are legitimate and necessary for server administration.
Evidence: Found in references/host-setup.md, scripts/backup.sh, and scripts/healthcheck.sh.
[EXTERNAL_DOWNLOADS]: Fetches software and verification keys from official sources during the installation process.
Evidence: Downloads Docker GPG keys and configures repositories using https://download.docker.com in references/host-setup.md.
[PRIVILEGE_ESCALATION]: Utilizes sudo for administrative tasks, which is standard for host-level hardening. The instructions specifically guide the creation of a non-root admin user to limit direct root access.
Evidence: Multiple uses of sudo and adduser in references/host-setup.md.
[PERSISTENCE]: Sets up automated backups using cron to ensure data recovery capabilities.
Evidence: Configures cron to run scripts/backup.sh in SKILL.md and references/host-setup.md.
[INDIRECT_PROMPT_INJECTION]: The audit and health check scripts ingest outputs from system commands (e.g., docker ps). This is used for security monitoring and regression testing and is appropriate for the skill's purpose.
Evidence: scripts/healthcheck.sh parses docker ps and docker inspect outputs to verify security constraints.

vps-hardening