hetzner-coder

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and execute the official Docker installation script from https://get.docker.com within an Ansible playbook (references/ansible-integration.md).
  • [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools including tofu, ansible-playbook, kamal, ssh, and curl (used to determine the local public IP via ifconfig.me) to manage and configure cloud resources.
  • [PRIVILEGE_ESCALATION]: In SKILL.md, the cloud-init configuration sets up a deploy user with passwordless sudo privileges (NOPASSWD:ALL), which is a standard pattern for enabling automated infrastructure management.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a configuration surface where user-provided variables (like project names and SSH keys) are interpolated into infrastructure-as-code templates and shell commands. This represents a standard administrative interface for resource provisioning.
  • [SAFE]: Security hardening measures are actively encouraged, including disabling root SSH login, disabling password authentication, and configuring fail2ban and ufw via Ansible playbooks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:28 AM