Hostinger VPS Optimizer
v1.0.0Applies kernel tuning, web server optimization, security hardening, and resource limits to boost Hostinger VPS performance and reduce costs.
⭐ 0· 657·1 current·1 all-time
byGoroni@gblockchainnetwork
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The declared purpose (kernel tuning, web-server tuning, security hardening) matches the included script (sysctl changes, apt install nginx/ufw/fail2ban, enable UFW). However, the SKILL.md also advertises cost analysis, auto-scaling, and references a configs/hostinger.sysctl file that is not present in the bundle — those advertised capabilities are not implemented here.
Instruction Scope
The runtime instructions imply a one-click optimizer but the provided script executes privileged system changes (sysctl -w, apt update && apt install, ufw enable). There are no safety checks, OS/distro compatibility checks, rollback/uninstall steps, or warnings about reboot and potential service disruption. The SKILL.md does not include the referenced config file or any cost-analysis/autoscaling logic, so the agent would be given authority to run impactful commands with incomplete documentation.
Install Mechanism
No install spec (instruction-only with an included script). Nothing is downloaded from external URLs and no archives are extracted. This minimizes install-time risk, but the included script will make on-system changes when executed.
Credentials
The skill does not request environment variables or credentials, which is appropriate. However, the script requires root privileges (to run apt, modify sysctl, enable UFW) and network access to apt repositories. Those privileges are proportional to the actions but are high-impact—users should be aware this is not a 'safe' read-only operation.
Persistence & Privilege
The skill does not request persistent presence (always: false) and does not attempt to modify other skills or agent config. The main concern is that the script performs privileged system modifications when run; this is not the same as the skill demanding permanent agent-level privileges.
What to consider before installing
This skill contains a small shell script that will modify kernel parameters, install packages (nginx, ufw, fail2ban) via apt, and enable the firewall. It does not request secrets, but it requires root and network access to apt repos. Actionable advice:
- Do NOT run this on production systems without testing first—try on a throwaway/staging VPS.
- Verify your OS is Debian/Ubuntu (script uses apt and ufw) before running; it will fail or break other distros.
- Back up configs and have console access ready in case enabling UFW locks you out. The script does run 'ufw allow ssh' first, but mistakes or differences in SSH config can still cause lockout.
- Note missing pieces: the SKILL.md mentions a configs/hostinger.sysctl file, cost analysis, and auto-scaling features that are not present in the package—treat those claims as unimplemented.
- If you plan to use the agent to run this script autonomously, restrict that capability and require explicit human approval each time; the script performs high-privilege changes.
- If you want safer behavior, require the skill to provide: OS detection, a dry-run mode, an explicit confirmation prompt, rollback/uninstall instructions, and the missing config files and cost-analysis code.Like a lobster shell, security has layers — review code before you run it.
latestvk977zrcmgkw6sa40c6h6kgt0ps81gyep
License
MIT-0
Free to use, modify, and redistribute. No attribution required.