dokploy

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include a direct install script (curl -sSL https://dokploy.com/install.sh | sh) from an unverified domain (no checksum), an unvetted GitHub repo, and non-official/custom server endpoints — a common pattern for malware distribution — while the Slack webhook and instance URL expose sensitive integration points rather than safe, vetted download sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Dokploy’s runtime deployment workflow can ingest outsider-authored free text from public Git repository contents (e.g., README/Dockerfile/app code) when the agent deploys a configured source: { type: github, repository: ... }, which the system reads as text to build/deploy.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running remote install code at runtime (curl -sSL https://dokploy.com/install.sh | sh) and offers cloning a Git repo used for installation (https://github.com/Dokploy/dokploy.git), both of which fetch external code that will be executed as part of the setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly directs running a remote install script (curl | sh) and deploying system services via Docker Compose on a VPS, actions that modify system state and typically require elevated privileges, so it encourages potentially sensitive, machine-level changes.