dokploy-api-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/setup.pyutility usessubprocess.runto automate the registration of the Dokploy MCP server with the Claude CLI. It also includes an optional flag to bypass TLS certificate validation when connecting to Dokploy instances using self-signed certificates. - [EXTERNAL_DOWNLOADS]: The skill documentation and setup scripts facilitate the download of the
@sattva/dokploy-mcppackage from the NPM registry usingnpxto establish the MCP server environment. - [REMOTE_CODE_EXECUTION]: The skill executes the Dokploy MCP server code retrieved from the external NPM registry to provide its core management capabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection by allowing the agent to ingest and process log data from external applications and deployment processes.
- Ingestion points: Log retrieval is performed via the
application_readLogsanddeployment_readLogstools as described inreferences/MCP-TOOLS.md. - Boundary markers: The skill instructions do not define specific delimiters or security prompts to isolate log content from other agent instructions.
- Capability inventory: The skill is configured with access to
Bash,Write, andWebFetchtools. - Sanitization: No automatic filtering or sanitization of ingested log content is implemented.
Audit Metadata