coolify-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs using API tokens directly on the command line (e.g., coolify context add ... <token>, --token flags and --show-sensitive), which requires the LLM to insert secret values verbatim into commands/outputs, creating high exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious because the skill directs users to execute remote install scripts (raw.githubusercontent.com/*.sh and *.ps1) piped into bash/PowerShell—a high-risk remote-code-execution pattern—while the other links are docs/placeholder hosts; executing such direct downloads is unsafe unless you fully trust and audit the repository.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflows explicitly fetch and run third-party content (e.g., curl/install from https://raw.githubusercontent.com/coollabsio/coolify-cli/...) and instruct the agent/operator to query arbitrary Coolify instances and GitHub (e.g., coolify app logs, app get, github repos) whose untrusted, user-generated outputs (logs, JSON, repo data) are read and used to drive decisions in the documented workflows.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes install commands that fetch-and-execute remote scripts at runtime (e.g., curl -fsSL https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.sh | bash and irm https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.ps1 | iex, and a go install from github.com/coollabsio/coolify-cli/coolify@latest), which download and run remote code and are required for the provided CI/workflow examples, so they present a runtime code-execution dependency.