setup-vps
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system commands for server management including user creation (
useradd), service management (systemctl), and firewall configuration (ufw).- [EXTERNAL_DOWNLOADS]: Fetches configuration and installation scripts from several well-known and established services including CrowdSec (install.crowdsec.net), Docker (get.docker.com), and NodeSource (deb.nodesource.com). These are standard installation methods for these tools.- [REMOTE_CODE_EXECUTION]: Employs standard installation patterns where scripts are downloaded and piped to a shell (e.g.,curl | bash) for CrowdSec, Docker, and Node.js. While this pattern carries inherent risks, the sources used are highly reputable infrastructure providers.- [PRIVILEGE_ESCALATION]: Requires root or sudo access to perform system-level hardening tasks such as editing/etc/ssh/sshd_config, installing packages viaapt-get, and modifying systemd services. This is necessary for the skill's primary purpose of server setup.
Audit Metadata