Caveat verdict

hostinger-vps-deploy

hostinger-vps-mcp-tools

🟢 Trusted

No high-risk patterns surfaced by the deep scan — automated capability review, not behavioral proof.

VPS provisioning using Hostinger official MCP API tools; credentials stored in vault with SecretRef for legitimate infrastructure automation.

⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.

Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

security

transparency

maintenance

Findings (15)

Pattern match high

References SSH/GPG private keys

references/security-options.md · code · ssh-key

Pattern match high

HTTP request to bare IP address — common in malicious payloads

references/security-options.md · code · http://10.200.200.1

Pattern match high

Pipe-to-shell pattern (curl | sh) — supply chain attack vector

scripts/03-install-docker.sh · prose · downgraded · curl -fsSL https://get.docker.com | sh

Pattern match high

Pipe to sh — executes piped content as shell commands

scripts/03-install-docker.sh · prose · downgraded · | sh

Pattern match high

Recursive delete from root or home — destructive command

scripts/04-deploy-koda.sh · prose · downgraded · rm -rf /

Pattern match high

Possible hardcoded credential

scripts/security/setup-cloudflare-tunnel.sh · prose · downgraded · TOKEN="${1:?Usage: $0 TUNNEL_TOKEN}

Pattern match medium

References sudo — requests elevated privileges

SKILL.md · prose · downgraded · sudo

Pattern match medium

References child_process — can spawn system processes

references/hostinger-backend.ts · prose · downgraded · child_process

Pattern match medium

Instructs covert action — may act without user awareness

references/hostinger-controller.ts · prose · downgraded · Silently

Pattern match medium

Accesses OpenClaw config/secrets directly

references/identity-setup.md · prose · downgraded · ~/.openclaw/openclaw.json

Pattern match medium

apt-get install — installs system packages

scripts/01-server-setup.sh · prose · downgraded · apt-get install

Pattern match medium

Accesses .ssh directory

scripts/security/setup-ssh-keys.sh · prose · downgraded · .ssh/

Pattern match low

References agent memory files

references/identity-setup.md · prose · downgraded · MEMORY.md

Pattern match low

Changes file ownership

scripts/02-install-gui.sh · prose · downgraded · chown

Pattern match low

Sets world-executable permissions

scripts/security/harden-server.sh · prose · downgraded · chmod 700

Why the tier is capped

Execution sink present in raw bytes (Hard Floor: class A/B). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.

Permissions & capabilities

No declared permissions — minimal attack surface.

network_in

Is this flag fair?

Check another skill Browse the registry Auditing your own skills or configs? Use the API