deploy-vps-local-cx
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local build operations and remote installations using bash commands through SSH and scp.
- [PRIVILEGE_ESCALATION]: The deployment instructions specify connecting to the target VPS as the 'root' user, which provides the agent with full administrative control over the target machine.
- [PERSISTENCE]: The skill utilizes 'pm2 save' to ensure the deployed application persists and automatically restarts across server reboots.
- [COMMAND_EXECUTION]: The use of the '--ignore-scripts' flag during 'npm pack' and 'npm install' is a security best practice that prevents the execution of potentially malicious lifecycle scripts during the build and installation process.
Audit Metadata