skills/popmechanic/vibesos/deploy/Gen Agent Trust Hub

deploy

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Bun installation script from its official domain (bun.sh) on the target VM using curl.
  • [REMOTE_CODE_EXECUTION]: Executes the downloaded Bun installation script by piping it directly to bash, a standard installation method for this runtime.
  • [COMMAND_EXECUTION]: Employs administrative privileges via sudo on the remote VM to install system packages (npm, inotify-tools), configure directory ownership, and manage systemd services.
  • [COMMAND_EXECUTION]: Performs automated SSH key generation and configuration to facilitate secure code synchronization with GitHub.
  • [COMMAND_EXECUTION]: Conducts automated environment configuration by reading local OIDC credentials from a .env file and transferring them to the remote VM instance.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 07:24 PM
Security Audit — agent-trust-hub — deploy