dokploy-api-mcp
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
curl,npx,docker, andgitto interact with the Dokploy API and manage server-side container deployments. - [EXTERNAL_DOWNLOADS]: The skill relies on external software by executing the
@ahdev/dokploy-mcppackage vianpxand recommending the installation of@dokploy/clifrom the NPM registry. - [SAFE]: The
scripts/setup.pyutility explicitly disables SSL certificate verification (ssl.CERT_NONE) when connecting to the Dokploy API. While this is a security best practice violation, it is a common configuration choice for supporting self-hosted instances using self-signed certificates. - [SAFE]: There is a minor discrepancy between the author context ('sattva2020') and the metadata in SKILL.md ('ai-ads-agent'), which is assessed as a documentation inconsistency rather than a malicious attempt at deception.
Audit Metadata