hetzner-cloud

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several URLs point to user-controlled Storage Box subdomains and an untrusted install script (install.example.com/agent.sh), which are high-risk for distributing arbitrary executables; the remaining URLs are official vendor/GitHub/CDN endpoints and are lower-risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime commands that fetch and execute remote content (e.g., "curl -sfL https://get.k3s.io | ... sh -" which pipes and executes a remote installer, and multiple "kubectl apply -f <remote‑url>" lines that fetch and apply remote manifests: https://get.k3s.io, https://github.com/hetznercloud/hcloud-cloud-controller-manager/releases/latest/download/ccm-networks.yaml, https://raw.githubusercontent.com/hetznercloud/csi-driver/v2.5.0/deploy/kubernetes/hcloud-csi.yml, https://raw.githubusercontent.com/metallb/metallb/v0.14.5/config/manifests/metallb-native.yaml), so these are high-confidence runtime external dependencies that execute remote code/configuration.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill contains explicit commands that change system state and system files (systemctl enable, mkfs/mount and echo to /etc/fstab, sudo mount, curl|sh installers, installimage), which would require root and could modify the machine the agent runs on.