vps-security-hardening

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the sshpass utility and standard shell commands to remotely administer a server via SSH. These operations include system updates, user management, and service configuration, all of which are consistent with the skill's stated purpose of VPS hardening.
  • [PRIVILEGE_ESCALATION]: The script creates a new user and adds it to the sudo group. It also modifies critical system configuration files (e.g., /etc/ssh/sshd_config, /etc/ufw/). While these are high-privilege actions, they are the primary function of a security hardening tool and are performed using credentials provided by the user.
  • [INDIRECT_PROMPT_INJECTION]: The skill collects user-provided information (IP addresses and passwords) and interpolates them into shell commands. While this creates a theoretical surface for malformed input to affect command execution, this is typical for administrative scripts and the logic is transparent and focused on the user's own infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 04:15 AM