The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The scripts/install-coolify-cli.sh script downloads and installs the official Coolify CLI binary from the coollabsio GitHub repository. This is a legitimate functional requirement for interacting with the targeted platform and follows the platform's official distribution method.\n- [EXTERNAL_DOWNLOADS]: Fetches deployment verification tools and registry-polling scripts from the official Coolify Cloud infrastructure. These downloads are performed over secure channels and target the specific service the skill is designed to manage.\n- [COMMAND_EXECUTION]: Utilizes shell scripts to perform lifecycle operations via the Docker daemon and the Coolify REST API. The skill includes logic to persist configuration by safely appending source instructions to the user's shell profile (.bashrc or .zshrc), which is standard behavior for developer tools requiring environment persistence.\n- [CREDENTIALS_UNSAFE]: Analysis of the skill's secret management confirms adherence to security best practices. It instructs the agent to store API tokens in a dedicated configuration file (~/.config/coolify-cloud.env) with restricted filesystem permissions (chmod 600) and explicitly warns against inlining secrets in Docker Compose files or scripts.\n- [SAFE]: A deterministic detector flagged a potential reverse shell in references/compose-authoring.md. Upon manual review, this was identified as a benign TCP health check probe (bash -lc 'exec 3<>/dev/tcp/127.0.0.1/<port>') commonly used to monitor container readiness in environments without higher-level probing tools.

deploy-coolify-cloud