hetzner-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official
hcloudCLI binary from the Hetzner Cloud GitHub repository during the setup phase. - [PRIVILEGE_ESCALATION]: Employs
sudoto install thehcloudbinary into the system-wide/usr/local/bindirectory. - [INDIRECT_PROMPT_INJECTION]: Ingestion points: Ingests configuration data from local files (e.g.,
rules.json,--records-file,--user-data-from-file) as seen inSKILL.mdand reference files. Boundary markers: The instructions lack specific boundary delimiters or safety warnings for the agent when processing these external data sources. Capability inventory: The skill provides extensive capabilities to create servers, modify DNS zones, and update firewalls across all reference files. Sanitization: There is no evidence of input validation or sanitization for the content of the external files being processed.
Audit Metadata