dokploy-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on external data sources such as cloned repositories and application logs, creating a potential vector for indirect prompt injection.
- Ingestion points: The agent is instructed to read project files (via Read, Glob, and Grep tools) and analyze service logs during troubleshooting, as described in SKILL.md and references/troubleshooting.md.
- Boundary markers: The skill does not define specific delimiters or instructions to disregard embedded commands in the untrusted data it processes.
- Capability inventory: The skill utilizes the Bash tool (SKILL.md) to execute Docker commands, manage system configurations, and perform network requests.
- Sanitization: There is no evidence of data sanitization or validation for content ingested from external repositories or logs.
- [COMMAND_EXECUTION]: The skill instructions involve running various system and deployment commands.
- Evidence: Usage of docker and docker-compose in templates/docker-compose.dokploy.yml, curl for API requests in references/methodes-deploiement.md and references/rollback-verification.md, and administrative tools like ufw and apt in references/production-hardening.md.
Audit Metadata