z-selfhost-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate deployment patterns and security hardening guidelines for VPS environments without any malicious intent or hidden code.- [CREDENTIALS_UNSAFE]: The instructions explicitly warn against hardcoding secrets in configuration files and recommend using environment files with restricted permissions, adhering to industry security best practices.- [PRIVILEGE_ESCALATION]: Guidelines include standard server hardening steps such as disabling root login, requiring SSH keys, and setting up a firewall, which are designed to protect the system rather than compromise it.- [PERSISTENCE]: The use of systemd units and Docker restart policies is appropriate for the skill's stated purpose of maintaining service availability on a production host.
Audit Metadata