dokploy
Fail
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Recommends the official Dokploy installation method via
curl -sSL https://dokploy.com/install.sh | sh. - [EXTERNAL_DOWNLOADS]: Fetches installation and configuration scripts from the official project domain (
dokploy.com). - [COMMAND_EXECUTION]: Instructions include the use of
git cloneanddocker composeto manage local server infrastructure. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes user-supplied deployment logs and error outputs for troubleshooting (SKILL.md).
- Boundary markers: None; the skill lacks specific delimiters or instructions to ignore potential commands embedded in external logs.
- Capability inventory: The agent has access to shell commands (Docker), file system operations, and authenticated network requests via the Dokploy API.
- Sanitization: No explicit filtering or sanitization of ingested log data is specified.
Recommendations
- HIGH: Downloads and executes remote code from: https://dokploy.com/install.sh - DO NOT USE without thorough review
Audit Metadata