vps-setup-hardening
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill performs administrative system configuration, including modifying SSH daemon settings, managing firewall rules via UFW and EC2 Security Groups, and configuring user accounts. These operations are essential for the stated purpose of server hardening and are guarded by explicit instructions to require manual user confirmation at every sensitive step.
- [EXTERNAL_DOWNLOADS]: Fetches repository configurations and GPG signing keys from well-known technology providers including Docker, NodeSource, and Tailscale. These downloads are performed to install official software packages and are handled using standard secure methods (e.g., verifying key blocks).
- [CREDENTIALS_UNSAFE]: The skill instructions explicitly forbid the agent from requesting or handling sensitive information such as passwords, private keys, or API tokens. It manages system access through SSH public keys and passwordless sudoers configuration, which is a standard practice for automated server administration.
- [PROMPT_INJECTION]: No malicious patterns or behavioral overrides were found. The skill includes robust 'manual-only gates' that instruct the agent to stop if not explicitly invoked, preventing accidental or autonomous execution.
Audit Metadata