hetzner-coder

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes automation scripts for infrastructure provisioning and configuration management.
  • The provisioning workflow in references/ansible-integration.md executes tofu, ansible-playbook, and kamal to deploy and bootstrap server resources.
  • The SKILL.md file suggests using curl -s ifconfig.me to dynamically determine the administrator's IP address for restricted SSH firewall rules.
  • [EXTERNAL_DOWNLOADS]: The skill references external scripts and modules to facilitate system setup.
  • Fetches the official Docker installation script from Docker's official domain (https://get.docker.com).
  • Installs the geerlingguy.swap role from the public Ansible Galaxy registry during the provisioning process.
  • [SAFE]: The skill follows secure credential management practices and server hardening standards.
  • Authentication is handled via placeholders or references to 1Password (e.g., op://Infrastructure/Hetzner/api_token), avoiding the storage of hardcoded secrets.
  • Infrastructure templates implement security measures such as disabling password-based SSH authentication and restricting database access to private networks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 01:43 AM