coolify-ops

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/install-cli.sh

This wrapper is primarily an installer/launcher and shows no direct malicious logic (no credential theft or exfiltration in the snippet). The main security concern is supply-chain risk: it executes a remote GitHub-hosted shell script via `curl ... | bash` without checksum/signature verification and it optionally installs using a moving target (`coolify@latest`). These patterns should be treated as high-integrity requirements for trusted environments; review and pin/verify upstream artifacts when possible.

Confidence: 70%Severity: 65%
Audit Metadata
Analyzed At
Jun 25, 2026, 01:58 PM
Package URL
pkg:socket/skills-sh/hifizz%2Fcoolify-ops-skill%2Fcoolify-ops%2F@76c9db7087cbcb8962fbe74571beb34047dde036