hetzner-server

SUSPICIOUS. The core purpose matches the capabilities: a Hetzner server-management skill reasonably uses `hcloud`, SSH, firewall operations, and cloud-init. However, the skill also recommends executing an unpinned remote install script from a personal GitHub dotfiles repo as root on new servers, and promotes SSH agent forwarding to remote hosts. Those behaviors are not necessary for basic Hetzner management and raise supply-chain and credential-exposure risk, though there is no clear evidence of direct credential exfiltration or confirmed malware.