hetzner-coder
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes automation scripts for infrastructure provisioning and configuration management.
- The provisioning workflow in
references/ansible-integration.mdexecutestofu,ansible-playbook, andkamalto deploy and bootstrap server resources. - The
SKILL.mdfile suggests usingcurl -s ifconfig.meto dynamically determine the administrator's IP address for restricted SSH firewall rules. - [EXTERNAL_DOWNLOADS]: The skill references external scripts and modules to facilitate system setup.
- Fetches the official Docker installation script from Docker's official domain (
https://get.docker.com). - Installs the
geerlingguy.swaprole from the public Ansible Galaxy registry during the provisioning process. - [SAFE]: The skill follows secure credential management practices and server hardening standards.
- Authentication is handled via placeholders or references to 1Password (e.g.,
op://Infrastructure/Hetzner/api_token), avoiding the storage of hardcoded secrets. - Infrastructure templates implement security measures such as disabling password-based SSH authentication and restricting database access to private networks.
Audit Metadata