The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides an example for server creation that uses curl | bash to download and execute a script from a remote URL. This pattern is a critical security risk as it executes arbitrary code from an untrusted source without prior verification. Evidence: curl -fsSL https://raw.githubusercontent.com/connorads/dotfiles/master/install.sh | bash in SKILL.md.
[EXTERNAL_DOWNLOADS]: The skill fetches configuration and installation scripts from a non-whitelisted external GitHub repository (connorads/dotfiles) that does not belong to the author or a trusted vendor.
[PERSISTENCE]: The skill includes commands to modify the local SSH configuration (~/.ssh/config) using the hcssh tool and executes remote scripts that create new user accounts and install persistent tooling on the managed servers.
[PRIVILEGE_ESCALATION]: The skill instructions include the use of sudo to perform administrative actions on the remote servers, such as creating swap files and inspecting system logs.
[COMMAND_EXECUTION]: The skill relies on the execution of the hcloud CLI and various shell commands to manage cloud infrastructure and configure remote environments.

hetzner-server