contabo
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands such as curl, tar, jq, and ssh to install dependencies, manage API configurations, and verify server state. These are standard operations for infrastructure deployment.
- [EXTERNAL_DOWNLOADS]: Downloads the official cntb CLI tool from Contabo's public GitHub repository. This is a trusted source for the required deployment binary.
- [CREDENTIALS_UNSAFE]: Instructs users to input API credentials using CLI flags, which can leave secrets in the shell command history. While this is the tool's standard method, it is a known security trade-off.
- [DATA_EXFILTRATION]: Accesses the user's local SSH public and private keys (~/.ssh/id_rsa) to enable access to newly created servers. This access is necessary for the skill's primary function of provisioning remote infrastructure.
Audit Metadata