The Agent Skills Directory

[COMMAND_EXECUTION]: The skill performs remote command execution on a VPS via SSH. It constructs shell commands by directly interpolating parameters such as {PROJECT_NAME}, {REPO_URL}, and {VPS_APP_DIR} from a local configuration file. The lack of input sanitization for these variables creates a risk of command injection on the remote server. The skill also modifies server-side SSH configurations (~/.ssh/config) to facilitate repository access.
[CREDENTIALS_UNSAFE]: The skill requires access to sensitive files, specifically the path to an SSH private key used for server authentication and the application's .env files. While necessary for the deployment workflow, handling these raw credentials increases the risk of accidental exposure.
[EXTERNAL_DOWNLOADS]: The skill fetches resources from external repositories, including system packages via apt-get and project source code via git clone. These operations target well-known and standard services such as official Ubuntu mirrors and GitHub.

vps-setup