cali-ops-docker-server-dashboard

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill is high-risk: it instructs automatic local SSH-config discovery and, via an SSH session with host-key checking disabled, collects sensitive server data (crontab, Docker containers/images/volumes, network/process mappings, Caddy/Tailscale info) that can be used for data exfiltration or targeting of hosts.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). references/dashboard.sh runs a remote bash script over SSH and captures its stdout into ALL_DATA, which is then parsed and rendered; that remote stdout includes free-form text from the target server (e.g., /etc/caddy/Caddyfile, crontab, container/image names/status), which is outsider-authored relative to the operating user’s chosen context.