coolify

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt mandates collecting sensitive secrets (admin password, Cloudflare API token) and instructs to "export all parameters" and run setup scripts, which would typically require the agent to include those secret values verbatim in generated commands or configuration, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow explicitly tells the agent to fetch and execute public, third‑party scripts (e.g., the one‑line curl to raw.githubusercontent.com / cdn.coollabs.io in assets/enhanced-quick-start.md and the "Run enhanced setup script" instruction in SKILL.md / references/BUNDLED_SCRIPTS.md), so it ingests untrusted external content that can change actions and tooling.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime commands that fetch-and-execute remote scripts (e.g., curl -fsSL https://raw.githubusercontent.com/YOUR-ORG/vibeskills-demo/main/.claude/skills/coolify/scripts/coolify-enhanced-setup.sh | bash and curl -fsSL https://cdn.coollabs.io/coolify/install.sh | bash), which download and execute remote code as required parts of the installation, so they pose a high runtime risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs installation of system packages (Docker CE), running setup scripts, and configuring SSH keys/localhost management which modify system files and require elevated privileges, so it directs actions that change and can compromise the machine state.