Security audit

dokku

Security checks across malware telemetry and agentic risk

Overview

This Dokku skill is a coherent server-administration command reference, but it exposes root-level install, plugin, SSH-key, cleanup, and destructive app commands with broad triggers and limited guardrails.

Install only if you intend to let an agent help administer a Dokku host. Review each sudo command, plugin URL, SSH key import, config export, network binding, Docker prune, and --force deletion before running it; prefer verified official sources and explicit Dokku-scoped prompts.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger terms include very broad words such as "deploy" and "cleanup," which are common across many unrelated skills and user requests. This can cause the Dokku skill to be invoked in unintended contexts, increasing the chance of executing sensitive infrastructure or container-management actions on the wrong host or for the wrong task.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The documentation includes a destructive command variant using `--force`, which bypasses the confirmation prompt for permanently destroying an app and its add-ons, but it does not explicitly warn the reader about the increased risk of irreversible deletion when using that flag. In operational or automation contexts, this can normalize unsafe usage and increase the chance of accidental destructive execution.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The documented `config`, `config:get`, and especially `config:export` commands reveal environment variables, which commonly contain secrets such as API keys, database credentials, and tokens. Presenting these commands without any warning about secret exposure increases the chance that users will print sensitive values to terminals, logs, screenshots, CI output, or shared backup artifacts.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The instructions tell the user to download and execute a remote bootstrap script with sudo, which gives that script full root privileges on the host. Even if this is a common installation pattern, failing to warn users about the security implications increases the chance they will run privileged code without verifying the source, integrity, or reviewed contents.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: Importing ~/.ssh/authorized_keys into Dokku adds those keys as Dokku admin keys, which can grant deployment and administrative control over the platform. Without a clear warning, users may unintentionally grant broad access to every key in that file, including stale, shared, or overly permissive keys.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.