The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses curl to check the HTTP status codes and response headers of the user's domains. This is a standard connectivity check to verify if a site is online and correctly routed to Hostinger's infrastructure.
[REMOTE_CODE_EXECUTION]: It mentions fetching configuration and performing vulnerability checks via official Hostinger API connectors. The operations are scoped to account health monitoring and do not execute untrusted remote scripts.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from a hosting environment (WordPress plugin lists, build logs). While this is an ingestion surface, the skill is explicitly defined as 'Read-only from start to finish' and only produces a report, which significantly mitigates the risk of injection influencing harmful actions.
[CREDENTIALS_SAFE]: The skill interacts with the Hostinger API via a connector, but no hardcoded credentials, API keys, or secrets are present in the instructions. It appropriately directs users to resolve billing issues through the official 'hPanel'.

audit-hosting