coolify-orchestrator

SUSPICIOUS: The skill's core API-mode behavior is coherent and mostly benign for Coolify administration, with data flowing to the user's own Coolify instance. Risk comes from the optional MCP path: it references a third-party coolify-mcp installer that uses download-and-execute patterns and would receive Coolify credentials, creating a disproportionate supply-chain and credential-forwarding risk relative to the otherwise legitimate purpose.