hostinger
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands including
curl,ssh,rsync, andscpto interact with Hostinger's REST API and manage remote VPS instances for deployment and configuration tasks. - [EXTERNAL_DOWNLOADS]: Fetches and executes the official Docker installation script from a well-known service (
https://get.docker.com) to provision the container engine on a VPS during baseline setup. - [INDIRECT_PROMPT_INJECTION]: The skill identifies surfaces where untrusted data could be processed.
- Ingestion points: User-supplied domain names, passwords, and application configurations are interpolated into API request bodies and shell scripts.
- Boundary markers: No specific delimiters or safety instructions are defined for interpolating user data into the command templates.
- Capability inventory: Includes shell execution, network operations, and remote file management across all reference files.
- Sanitization: No explicit sanitization or validation of user-provided strings is documented within the skill instructions.
Audit Metadata