hostinger

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point to third-party destinations (an arbitrary GitHub repo and a non-official redirect domain) that can be used to fetch and execute remote content (e.g., Docker Manager pulling a repo or a forwarding target) and therefore are potentially risky compared with the official Hostinger and vendor endpoints.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for Docker Manager deployments ingests outsider-authored free text via a user-supplied GitHub/repo URL or arbitrary URL containing raw Docker Compose content (“Docker Manager deploys Compose projects… from inline content, a GitHub repo URL… or any URL returning raw compose content”).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The deployment baseline runs at runtime and directly executes a remote installer via "curl -fsSL https://get.docker.com | sh", which fetches and runs remote code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill exposes explicit purchase endpoints and examples that create billable resources (POST /api/vps/v1/virtual-machines) including an item_id and payment_method_id, i.e. API calls that initiate purchases/charge existing payment methods. That is a direct financial execution capability (ability to send a purchase/charge request), even if payment methods must be added via the hPanel.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to perform destructive and privilege-sensitive VM operations (OS recreate, change root password, run post-install scripts, bring down Docker projects, modify firewalls/SSH keys) that change the machine's state and require elevated privileges or irreversible actions.