vultr
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
vultr-clitool directly from the vendor's official GitHub repository during the installation process. - [REMOTE_CODE_EXECUTION]: As part of the prerequisite setup, the skill downloads a binary archive and extracts it for execution to enable cloud management capabilities.
- [COMMAND_EXECUTION]: The skill uses
vultr-clifor server provisioning, firewall configuration, and Kubernetes cluster management, alongsidesshfor remote server verification. - [DATA_EXFILTRATION]: The skill accesses the user's public SSH key for deployment purposes and stores configuration variables, including IP addresses and local key paths, in a
.env.localfile. - [PRIVILEGE_ESCALATION]: The installation instructions utilize
sudoto move thevultr-clibinary to a system directory (/usr/local/bin/), which is a standard procedure for installing command-line tools. - [DYNAMIC_EXECUTION]: The skill generates local environment configuration scripts at runtime by appending deployment metadata to a local file.
- [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-supplied parameters into shell commands, representing a potential surface for injection if inputs are not validated by the agent platform.
- Ingestion points:
SERVER_NAMEandSSH_KEY_NAMEparameters collected inSKILL.mdandassets/env-template. - Boundary markers: No specific delimiters or safety instructions are used when interpolating these values into commands like
greporvultr-cli instance create. - Capability inventory: The skill executes
vultr-cli,ssh,curl, and shell processing tools (grep,awk,echo). - Sanitization: No sanitization or escaping mechanisms are applied to user-provided strings before they are executed in a shell context.
Audit Metadata