The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill promotes the installation of a third-party CLI tool by piping remote shell scripts directly from GitHub into bash and iex. This execution method bypasses local inspection of the script content before it runs.\n
Evidence (SKILL.md): curl -fsSL https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.sh | bash\n
Evidence (SKILL.md): irm https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.ps1 | iex\n- [DATA_EXFILTRATION]: The skill provides commands that read sensitive authentication files (private SSH keys) from the user's system to be uploaded to the Coolify service.\n
Evidence (SKILL.md): coolify private-key add --name deploy-key --file ~/.ssh/id_ed25519\n
Evidence (references/command-reference.md): coolify private-key add ... --file <path>\n- [CREDENTIALS_UNSAFE]: The skill documentation accesses sensitive file paths associated with credentials, such as ~/.ssh/id_ed25519 and .env files, which may contain sensitive configuration data.\n- [PRIVILEGE_ESCALATION]: The skill includes instructions to write shell completion scripts to the /etc/ directory, which typically requires sudo or root access, increasing the potential impact if the command is misused.\n
Evidence (references/command-reference.md): coolify completion bash > /etc/bash_completion.d/coolify\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data, such as .env files and application logs, which could serve as a vector for indirect prompt injection if an attacker controls those inputs.\n
Ingestion points: Reads from .env files using the env sync command and streams logs using the app logs command.\n
Boundary markers: No specific boundary markers or "ignore instructions" warnings are present in the provided context for handling file or log data.\n
Capability inventory: The skill has the ability to execute CLI commands, perform network requests via the CLI, and access the filesystem.\n
Sanitization: There is no evidence of sanitization or filtering applied to the content of the .env files or application logs before processing.

coolify-cli