The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches the hcloud CLI binary from the official Hetzner Cloud GitHub repository.
Evidence: curl -sL https://github.com/hetznercloud/cli/releases/latest/download/hcloud-linux-amd64.tar.gz | tar xz in SKILL.md.
[COMMAND_EXECUTION]: Executes shell commands to manage cloud infrastructure, including server creation, firewall rule updates, and SSH connectivity checks.
Evidence: Multiple hcloud and ssh commands throughout SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user parameters which are interpolated directly into shell commands without sanitization, creating a potential surface for command injection.
Ingestion points: User-provided values for SERVER_NAME, HETZNER_LOCATION, HETZNER_SERVER_TYPE, and SSH_KEY_NAME.
Boundary markers: Absent; inputs are directly exported as environment variables and used in CLI arguments.
Capability inventory: Includes file writes (>> .env.local), network operations via hcloud and curl, and remote command execution via ssh.
Sanitization: No input validation or escaping is performed on the provided variables before they are used in shell contexts (e.g., hcloud server create --name "$SERVER_NAME").
[PRIVILEGE_ESCALATION]: Requests elevated privileges to install the downloaded CLI tool into a system directory.
Evidence: sudo mv hcloud /usr/local/bin/ in SKILL.md.

hetzner