vps

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing Docker using the official installation script from a well-known service (docker.com) via curl -fsSL https://get.docker.com | sh in deployment-workflow.md.
  • [COMMAND_EXECUTION]: The skill facilitates server administration through standard tools such as ssh, rsync, and scp for deploying applications and managing infrastructure. It also includes instructions for executing user-defined post-installation scripts and Docker Compose projects.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it can process external content from GitHub repositories (Docker Compose files) and execute user-provided scripts.
  • Ingestion points: Docker Compose configuration fetched from GitHub URLs (docker-patterns.md) and post-install scripts defined in configuration files (terraform-examples.md).
  • Boundary markers: Not explicitly defined in the provided examples.
  • Capability inventory: Full shell access via SSH, VPS lifecycle management (recreate, stop, start) via API, and network operations through standard system utilities.
  • Sanitization: Standard validation of input (e.g., password strength checks) is performed by the vendor's API backend.
  • [SAFE]: All referenced SDKs (hostinger-api, hostinger-api-sdk) and repositories are official resources belonging to the vendor (Hostinger) or well-known tech services (Docker, Terraform). The skill encourages security hardening, such as disabling password authentication and using restricted firewalls.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 09:02 AM
Security Audit — agent-trust-hub — vps