hetzner-deploy

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official hcloud CLI binary from the Hetzner Cloud GitHub repository during the setup phase.
  • [PRIVILEGE_ESCALATION]: Employs sudo to install the hcloud binary into the system-wide /usr/local/bin directory.
  • [INDIRECT_PROMPT_INJECTION]: Ingestion points: Ingests configuration data from local files (e.g., rules.json, --records-file, --user-data-from-file) as seen in SKILL.md and reference files. Boundary markers: The instructions lack specific boundary delimiters or safety warnings for the agent when processing these external data sources. Capability inventory: The skill provides extensive capabilities to create servers, modify DNS zones, and update firewalls across all reference files. Sanitization: There is no evidence of input validation or sanitization for the content of the external files being processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:42 PM