vps
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing Docker using the official installation script from a well-known service (docker.com) via
curl -fsSL https://get.docker.com | shindeployment-workflow.md. - [COMMAND_EXECUTION]: The skill facilitates server administration through standard tools such as
ssh,rsync, andscpfor deploying applications and managing infrastructure. It also includes instructions for executing user-defined post-installation scripts and Docker Compose projects. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it can process external content from GitHub repositories (Docker Compose files) and execute user-provided scripts.
- Ingestion points: Docker Compose configuration fetched from GitHub URLs (
docker-patterns.md) and post-install scripts defined in configuration files (terraform-examples.md). - Boundary markers: Not explicitly defined in the provided examples.
- Capability inventory: Full shell access via SSH, VPS lifecycle management (recreate, stop, start) via API, and network operations through standard system utilities.
- Sanitization: Standard validation of input (e.g., password strength checks) is performed by the vendor's API backend.
- [SAFE]: All referenced SDKs (
hostinger-api,hostinger-api-sdk) and repositories are official resources belonging to the vendor (Hostinger) or well-known tech services (Docker, Terraform). The skill encourages security hardening, such as disabling password authentication and using restricted firewalls.
Audit Metadata