coolify

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes examples that pass API tokens directly as command-line arguments (e.g., "coolify context set-token ... " and "coolify context add ... "), which requires embedding secret values verbatim into commands/outputs and thus poses an exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a raw GitHub-hosted install shell script (a direct .sh download intended to be piped to bash), which executes remote code from a third-party repo and is therefore suspicious unless you have verified the repository's authenticity and reviewed the script content.