Skip to content

vps-forge 1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 13:22
· 13 commits to main since this release
v1.0.0
f5baa70

The first public release of vps-forge, an open Agent Skill that lets your AI coding agent set up, harden and audit a Debian or Ubuntu VPS without locking you out.

Install

npx skills add mountain-beaver/vps-forge

The README has the commands for Claude Code (plugin), Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode, gh skill, and others. For Claude.ai or Claude Desktop, upload vps-forge-skill.zip from this release under Settings → Capabilities → Skills.

What it does

  • A phased workflow: recon, safety net, base, SSH, firewall, fail2ban, kernel, workload, backups, alerts, comfort, verify and document.
    • Three levels: baseline, hardened and paranoid.
    • Profiles: web, docker, vpn, db, worker and game.
  • A dead-man switch around every SSH, firewall, sudo or PAM change. Each change is tested from a new connection. If that login fails, the change rolls back by itself after 5 minutes, and also at boot.
  • audit.sh: a read-only audit with 40+ checks, a score and JSON output. external-check.sh: what the internet sees.
  • Phone alerts through ntfy, Telegram or a webhook. restic backups with a restore test. A SERVER.md that explains every open port.

Benchmark

Claude Opus 5.5 ran the same four tasks with and without the skill. That was 120 runs on real Debian 12/13 and Ubuntu 22.04/24.04/26.04 VMs, scored from outside the server by a separate judge.

  • Scores: 79–92 out of 100 without the skill, 99–100 with it.
  • Lockouts: none.
  • Self-bans: the agent banned its own admin IP in 7 of 60 runs without the skill, and in 0 of 60 with it.

The README lists every caveat:

  • Opus is already good without the skill; the skill closes the last 8–20 points.
  • The scenarios are not unseen: three of them were used while revising the skill.
  • One check, root login, is a judgement call. Without it the scores are 85–93 vs 100.
  • The skill does more than a short checklist asks, and that counts in its favour.
  • Lynis barely moves.
  • Runs take longer.
  • Only one model was measured.

The full notes are in CHANGELOG.md.

Assets 3
Loading