run-dokploy-mcp

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt requires constructing mcp__dokploy__ calls that include environment variable strings like env: "KEY=value\nKEY2=value2", which forces the LLM to embed secret or credential values verbatim in its generated function calls/commands, creating an exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs the agent to run many system-altering operations (deploy, restart containers, delete applications/compose/postgres, remove servers, run docker prune/settings-clean) via MCP tools—actions that modify or destroy host state and can irreversibly change the machine.