hetzner-coder
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and execute the official Docker installation script from
https://get.docker.comwithin an Ansible playbook (references/ansible-integration.md). - [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools including
tofu,ansible-playbook,kamal,ssh, andcurl(used to determine the local public IP viaifconfig.me) to manage and configure cloud resources. - [PRIVILEGE_ESCALATION]: In
SKILL.md, the cloud-init configuration sets up adeployuser with passwordless sudo privileges (NOPASSWD:ALL), which is a standard pattern for enabling automated infrastructure management. - [INDIRECT_PROMPT_INJECTION]: The skill defines a configuration surface where user-provided variables (like project names and SSH keys) are interpolated into infrastructure-as-code templates and shell commands. This represents a standard administrative interface for resource provisioning.
- [SAFE]: Security hardening measures are actively encouraged, including disabling root SSH login, disabling password authentication, and configuring
fail2banandufwvia Ansible playbooks.
Audit Metadata