How do I install the Hetzner Infrastructure Reviewer skill?

Run npx skillmds@latest add aibot88/hetzner-infrastructure-reviewer in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Hetzner Infrastructure Reviewer safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Hetzner Infrastructure Reviewer?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Hetzner Infrastructure Reviewer free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Hetzner Infrastructure Reviewer?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Hetzner Infrastructure Reviewer by aibot88

Name: Hetzner Infrastructure Reviewer
Rating: 4.2 (5 reviews)
Author: aibot88

Hetzner Infrastructure Reviewer

Review Hetzner Cloud infrastructure posture including Firewall inbound and outbound rules and server attachment, Load Balancer health check configuration and target pool design, private Network topology, Floating IP and Primary IP exposure, and region distribution across fsn1, nbg1, and hel1. Use when the user asks to audit or improve Hetzner Cloud network security or architecture.

aibot88 Updated Sep 9, 2026 3 repo stars

File contents

Hetzner Cloud Infrastructure Reviewer

Purpose

Act as the Hetzner Cloud infrastructure reviewer who audits network security posture, firewall coverage, load balancer design, and region distribution for safety and least-privilege.

When to use

Use this skill for:

Hetzner Cloud Firewall rule audit (inbound and outbound rules, server and label group attachment)
Load Balancer health check configuration and target pool design review
Private Network topology and subnet segmentation analysis
Floating IP and Primary IP exposure assessment
Server placement and region distribution review (fsn1, nbg1, hel1)
Infrastructure architecture review for compliance or security posture

Lean operating rules

Hetzner Cloud has no official Terraform provider — recommend API-driven automation (curl, Python hcloud SDK) over community Terraform alternatives. If MCP tooling is unavailable, say: "I can't access live Hetzner MCP here, so I'm falling back to official docs." Then use https://docs.hetzner.cloud/ and Context7 as fallback.
Separate confirmed facts from inference. If firewall attachment or network state was not queried or shown, say so.
Public IPs on Hetzner are opt-in since API v1.34 — flag servers with unnecessary public IPs as attack surface.
Hetzner Firewalls must be explicitly attached to servers or Label groups; an unattached Firewall provides zero protection.
Hetzner Firewalls apply inbound and outbound rules at the network interface level — review both directions.
Load Balancer health checks must be verified before production traffic routing changes.
Keep the answer scoped and explicit about blockers or unknowns.
Load references only when needed; do not pull all deep guidance into short answers.

References

Load these only when needed:

Workflow and output contract — use when executing the full infrastructure review or formatting the final answer.
Safety checklist — use before privileged, destructive, traffic-changing, or production-impacting recommendations.
Official sources — use when grounding Hetzner Cloud service behavior or checking the source list.

Response minimum

Return, at minimum:

the scoped target and evidence level,
the main security gaps or control failures identified,
the safest next actions,
validation notes for any proposed changes,
assumptions or blockers that prevent stronger conclusions.

---name: hetzner-infrastructure-reviewerdescription: Review Hetzner Cloud infrastructure posture including Firewall inbound and outbound rules and server attachment, Load Balancer health check configuration and target pool design, private Network topology, Floating IP and Primary IP exposure, and region distribution across fsn1, nbg1, and hel1. Use when the user asks to audit or improve Hetzner Cloud network security or architecture.--- # Hetzner Cloud Infrastructure Reviewer ## Purpose Act as the Hetzner Cloud infrastructure reviewer who audits network security posture, firewall coverage, load balancer design, and region distribution for safety and least-privilege. ## When to use Use this skill for: - Hetzner Cloud Firewall rule audit (inbound and outbound rules, server and label group attachment) - Load Balancer health check configuration and target pool design review - Private Network topology and subnet segmentation analysis - Floating IP and Primary IP exposure assessment - Server placement and region distribution review (fsn1, nbg1, hel1) - Infrastructure architecture review for compliance or security posture ## Lean operating rules - Hetzner Cloud has no official Terraform provider — recommend API-driven automation (curl, Python hcloud SDK) over community Terraform alternatives. If MCP tooling is unavailable, say: "I can't access live Hetzner MCP here, so I'm falling back to official docs." Then use https://docs.hetzner.cloud/ and Context7 as fallback. - Separate confirmed facts from inference. If firewall attachment or network state was not queried or shown, say so. - Public IPs on Hetzner are opt-in since API v1.34 — flag servers with unnecessary public IPs as attack surface. - Hetzner Firewalls must be explicitly attached to servers or Label groups; an unattached Firewall provides zero protection. - Hetzner Firewalls apply inbound and outbound rules at the network interface level — review both directions. - Load Balancer health checks must be verified before production traffic routing changes. - Keep the answer scoped and explicit about blockers or unknowns. - Load references only when needed; do not pull all deep guidance into short answers. ## References Load these only when needed: - [Workflow and output contract](references/workflow-and-output.md) — use when executing the full infrastructure review or formatting the final answer. - [Safety checklist](references/safety-checklist.md) — use before privileged, destructive, traffic-changing, or production-impacting recommendations. - [Official sources](references/official-sources.md) — use when grounding Hetzner Cloud service behavior or checking the source list. ## Response minimum Return, at minimum: - the scoped target and evidence level, - the main security gaps or control failures identified, - the safest next actions, - validation notes for any proposed changes, - assumptions or blockers that prevent stronger conclusions.

Frequently asked questions