coolify-troubleshoot

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes curl/CLI examples that explicitly embed an Authorization: Bearer header (and similar placeholders), which encourages substituting and outputting secret credentials verbatim in commands.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These are suspicious because the pages include and point to a direct shell installer (https://cdn.coollabs.io/coolify/install.sh) that the skill explicitly recommends piping to bash — downloading and executing remote .sh scripts from an external CDN (and from a third‑party skill site) is a high‑risk malware distribution pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running system-level commands that change firewall rules (ufw allow), restart and modify services (docker compose restart, docker restart, deleting ACME storage), and even run a remote installer via curl | bash — all actions that modify the host state and typically require elevated privileges, so it poses a high risk of compromising the machine.