skills/terminalskills/skills/coolify/Gen Agent Trust Hub

coolify

Fail

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official installation script for the Coolify CLI.
  • Evidence: The compatibility field in SKILL.md contains the command curl -fsSL https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.sh | bash. This targets the official repository of the Coolify project.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files, creating a surface for instructions embedded in data to influence agent behavior.
  • Ingestion points: The coolify app env sync command in SKILL.md reads from local .env files (e.g., .env.production).
  • Boundary markers: There are no explicit instructions or delimiters provided to the agent to prevent it from obeying instructions that might be contained within the environment variable values.
  • Capability inventory: The skill allows for significant operations including triggering deployments, managing databases, and executing API calls via curl across SKILL.md and references/api-reference.md.
  • Sanitization: The skill does not describe any sanitization or validation logic for the content of the .env files prior to synchronization.
  • [COMMAND_EXECUTION]: The skill extensively uses shell commands to interact with the Coolify CLI and REST API.
  • Evidence: Numerous examples in SKILL.md and references/api-reference.md demonstrate the use of coolify CLI commands and curl for application and database management.
Recommendations
  • HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/coollabsio/coolify-cli/main/scripts/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 15, 2026, 05:33 AM
Security Audit — agent-trust-hub — coolify