agentic-vps
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The provisioning script configures a non-root agent user with passwordless sudo privileges using the NOPASSWD:ALL directive. This design choice enables the agent to manage the host autonomously, reflecting the skill's capability-preserving security model.
- [REMOTE_CODE_EXECUTION]: The skill fetches and executes installation scripts from well-known technology providers, including NodeSource, Rustup, Bun, and Tailscale, using piped shell execution.
- [EXTERNAL_DOWNLOADS]: Downloads GPG keys and configures package repositories for the GitHub CLI and Docker from their official domains.
- [COMMAND_EXECUTION]: The verification and staging scripts execute shell commands locally and over SSH to probe the remote host's configuration and enforce lockout-safe ordering for firewall changes.
- [EXTERNAL_DOWNLOADS]: Installs the Claude Code and sandbox-runtime packages directly from the public NPM registry.
Audit Metadata