dokploy-best-practices

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime installation command that fetches and executes remote code via curl -sSL https://dokploy.com/install.sh | sh, which executes code from that URL during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes host-level actions (running a curl | sh installer, updating Docker services, modifying firewall/ufw settings, scheduling prune jobs) that modify system state and would require root/sudo privileges, so it should be flagged.