The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill contains instructions to execute a remote script via curl -fsSL https://raw.githubusercontent.com/connorads/dotfiles/master/install.sh | bash within the user-data field of the hcloud server create command. This pattern executes arbitrary code from an untrusted source (connorads GitHub account) with root privileges during the server's first boot.
[COMMAND_EXECUTION]: The skill uses the hcloud CLI and ssh for server management tasks. It also suggests running a local utility hcssh which modifies the user's ~/.ssh/config file, representing direct manipulation of sensitive configuration files.
[EXTERNAL_DOWNLOADS]: The skill fetches setup scripts from raw.githubusercontent.com which is an external source not associated with the skill author or a trusted organization list.
[PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests and processes data from external sources such as server logs (journalctl) and initialization status (cloud-init status) without explicit boundary markers or sanitization, potentially allowing external data to influence agent behavior.

hetzner-server