vps-server-management
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute management commands such as
hermes update,hermes gateway restart, andjournalctlon remote VPS hosts. These operations are restricted to authorized hosts and require user approval as per the skill's instructions. - [INDIRECT_PROMPT_INJECTION]: The skill's functionality involves reading potentially untrusted data from server logs and configuration files, creating a surface for indirect prompt injection.
- Ingestion points: Ingests system logs via
journalctland reads application configuration from~/.hermes/config.yaml(referenced inSKILL.md). - Boundary markers: The skill suggests using "scoped redacted logs" but does not specify explicit boundary delimiters to isolate log content from instructions.
- Capability inventory: The skill possesses the capability to execute commands on remote servers, update software, and modify configuration files via SSH.
- Sanitization: The skill advises redacting logs before analysis, which helps mitigate data exposure and reduces the likelihood of processing malicious payloads.
Audit Metadata