vps-security-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
sshpassutility and standard shell commands to remotely administer a server via SSH. These operations include system updates, user management, and service configuration, all of which are consistent with the skill's stated purpose of VPS hardening. - [PRIVILEGE_ESCALATION]: The script creates a new user and adds it to the
sudogroup. It also modifies critical system configuration files (e.g.,/etc/ssh/sshd_config,/etc/ufw/). While these are high-privilege actions, they are the primary function of a security hardening tool and are performed using credentials provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill collects user-provided information (IP addresses and passwords) and interpolates them into shell commands. While this creates a theoretical surface for malformed input to affect command execution, this is typical for administrative scripts and the logic is transparent and focused on the user's own infrastructure.
Audit Metadata