coolify
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs adding privileged docker run options and host mounts (e.g., --privileged, --volume /:/host, /var/run/docker.sock) and using nsenter to run commands as root on the host, and shows how to patch applications to apply those options via the API, which directly enables compromising the machine state.
Audit Metadata