setup-coolify-devops
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
spawnSyncand direct shell commands to executegit,tailscale, and a local Node.js scaffolding script (scaffold.js) to manage the deployment repository and server configuration. - [PRIVILEGE_ESCALATION]: The instructions direct the agent to use
sudoto configure Tailscale settings (e.g., enabling SSH or setting tags) on the host server, which is necessary for the skill's primary purpose of server administration. - [PERSISTENCE]: The skill automates the addition of a sourcing line to
~/.bashrcto ensure that environment variables containing API tokens persist across shell sessions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as container logs and task outputs. It contains explicit guardrails instructing the agent to treat this content as data rather than instructions, specifically warning against log lines that might attempt to harvest environment variables.
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions to run official installation scripts from well-known and trusted services, including Tailscale (
tailscale.com) and Coolify (coollabs.io).
Audit Metadata