coolify
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official installation script for the Coolify CLI.
- Evidence: The
compatibilityfield inSKILL.mdcontains the commandcurl -fsSL https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.sh | bash. This targets the official repository of the Coolify project. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files, creating a surface for instructions embedded in data to influence agent behavior.
- Ingestion points: The
coolify app env synccommand inSKILL.mdreads from local.envfiles (e.g.,.env.production). - Boundary markers: There are no explicit instructions or delimiters provided to the agent to prevent it from obeying instructions that might be contained within the environment variable values.
- Capability inventory: The skill allows for significant operations including triggering deployments, managing databases, and executing API calls via
curlacrossSKILL.mdandreferences/api-reference.md. - Sanitization: The skill does not describe any sanitization or validation logic for the content of the
.envfiles prior to synchronization. - [COMMAND_EXECUTION]: The skill extensively uses shell commands to interact with the Coolify CLI and REST API.
- Evidence: Numerous examples in
SKILL.mdandreferences/api-reference.mddemonstrate the use ofcoolifyCLI commands andcurlfor application and database management.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.sh - DO NOT USE without thorough review
Audit Metadata