coolify
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external Coolify instances to retrieve application logs, service descriptions, and deployment metadata. This data is considered untrusted and could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Application logs and resource metadata retrieved via MCP tools in
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to the agent to treat the retrieved content as untrusted data.
- Capability inventory: The skill has the ability to list, inspect, and modify resources (start, stop, redeploy) based on the information it processes.
- Sanitization: No explicit sanitization or filtering mechanisms are described for the data fetched from the Coolify instance.
Audit Metadata