create-internal-app

SUSPICIOUS: the core deployment actions match the stated purpose, but the skill expands trust by fetching mutable remote instructions from a personal GitHub repo and by delegating ongoing infra control to another agent using Dokploy credentials. No clear credential theft or hostile endpoint is shown, so this is not confirmed malware, but it is higher-risk than a self-contained deployment guide.