Atlas / Skills / fcakyon / Dokploy Deploy

Dokploy DeployCAUTION

skills/fcakyon/dokploy-deploy

Battle-tested Claude Code, OpenAI Codex, Cursor configs, plugins, hooks and agents with Kimi, MiniMax and GLM API support.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
Apache-2.0
Stars
1,174
01

Overview

Battle-tested Claude Code, OpenAI Codex, Cursor configs, plugins, hooks and agents with Kimi, MiniMax and GLM API support.

Read from source at commit ae618ef5da66OBSERVED · 2026-10-12
02

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: dokploy-deploy
description: This skill should be used when user asks to "deploy with Dokploy", "use Dokploy Cloud", "manage self-hosted Dokploy", "deploy Docker Compose on Dokploy", "manage Dokploy databases", "configure Dokploy domains", or "look up Dokploy CLI commands".
references:
  - cloud
  - getting-started
  - applications
  - cli-commands
license: MIT
---

# Dokploy Deploy Skill

Skill for working with Dokploy Cloud and self-hosted Dokploy dashboards. Use the copied Dokploy docs for dashboard workflows and `references/cli-commands.md` for the CLI command index.

Your knowledge of Dokploy plans, install flow, and product behavior may be outdated. Prefer the local references over memory when you need current steps or product wording.

## Quick Decision Trees

### "I need to choose Dokploy Cloud or self-hosted"

```text
Need Dokploy Cloud?
├─ Managed Dokploy control plane → references/cloud/cloud.mdx
├─ Deploy to remote servers from Dokploy Cloud → references/cloud/cloud.mdx
└─ Need the dashboard docs too → references/remote-servers/ + references/applications/

Need self-hosted Dokploy?
├─ Fresh install → references/getting-started/installation.mdx
├─ Custom install settings → references/getting-started/manual-installation.mdx
└─ Day-to-day dashboard usage → references/applications/, references/docker-compose/, references/databases/
```

### "I need to deploy applications"

```text
Need app deploy workflow?
├─ App overview and tabs → references/applications/index.mdx
├─ Build and deploy details → references/applications/build-type.mdx
├─ Production guidance → references/applications/going-production.mdx
├─ Zero downtime or rollbacks → references/applications/zero-downtime.mdx and references/applications/rollbacks.mdx
└─ Preview deploys → references/applications/preview-deployments.mdx
```

### "I need Docker Compose"

```text
Need Docker Compose?
├─ Main workflow → references/docker-compose/index.mdx
├─ Domain handling → references/docker-compose/domains.mdx
├─ Example setup → references/docker-compose/example.mdx
└─ Utility details → references/docker-compose/utilities.mdx
```

### "I need databases"

```text
Need database docs?
├─ Overview → references/databases/index.mdx
├─ Backups or restore → references/databases/backups.mdx and references/databases/restore.mdx
├─ Connection docs → references/databases/connection/
└─ CLI command lookup → references/cli-commands.md
```

### "I need domains or HTTPS"

```text
Need domains?
├─ Main domain workflow → references/domains/index.mdx
├─ Generated domains → references/domains/generated.mdx
├─ Cloudflare-specific flow → references/domains/cloudflare.mdx
└─ Other DNS providers → references/domains/others.mdx
```

### "I need remote servers"

```text
Need remote servers?
├─ Feature overview → references/remote-servers/index.mdx
├─ Build server flow → references/remote-servers/build-server.mdx
├─ Deployment flow → references/remote-servers/deployments.mdx
├─ Setup instructions → references/remote-servers/instructions.mdx
└─ Security and validation → references/remote-servers/security.mdx and references/remote-servers/validate.mdx
```

### "I need the Dokploy CLI"

```text
Need CLI lookup?
└─ Full command index → references/cli-commands.md
```

## Working Notes

- Use copied Dokploy docs for product behavior and dashboard steps.
- Use `references/cli-commands.md` for a quick command list sourced from `Dokploy/cli`.
- If the docs and the CLI source disagree, treat the CLI source-derived command index as the source of truth for command names.
03

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
found

Findings (11)

MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
references/docker-compose/domains.mdx:137
- DATABASE_URL=postgres://postgres:password@database:5432/mydatabase
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
references/docker-compose/domains.mdx:228
- DATABASE_URL=postgres://postgres:password@database:5432/mydatabase
LOWInventory / provenance · inv.symlink · CWE-1104
.claude/output-styles/adhd-explanatory.md
.claude/output-styles/adhd-explanatory.md
Why it matters. link not followed
LOWInventory / provenance · inv.symlink · CWE-1104
AGENTS.md
AGENTS.md
Why it matters. link not followed
LOWInventory / provenance · inv.symlink · CWE-1104
GEMINI.md
GEMINI.md
Why it matters. link not followed
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
references/docker-compose/index.mdx:28
**1. Inject all variables** — Use the `env_file` option in your `docker-compose.yml` to load every variable from the `.env` file into the container:
Why it matters. asks the agent to read credentials
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
references/getting-started/installation.mdx:77
curl -sSL https://dokploy.com/install.sh | sh
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
references/getting-started/installation.mdx:91
export DOKPLOY_VERSION=canary && curl -sSL https://dokploy.com/install.sh | sh
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
references/getting-started/installation.mdx:96
export DOKPLOY_VERSION=latest && curl -sSL https://dokploy.com/install.sh | sh
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
references/getting-started/installation.mdx:104
curl -sL https://github.com/Dokploy/dokploy/releases/download/v0.26.6/install.sh | sh
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
references/getting-started/installation.mdx:117
curl -sSL https://dokploy.com/install.sh | sh

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha ae618ef5da66full audit observations/trust-audit/skill/fcakyon__dokploy-deploy.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-12ae618ef5da66CAUTIONB89first audit
05

Questions

What does the Dokploy Deploy skill do?

Battle-tested Claude Code, OpenAI Codex, Cursor configs, plugins, hooks and agents with Kimi, MiniMax and GLM API support.

Is Dokploy Deploy safe to install?

With care. The audit graded it B (89/100) and found 11 things worth knowing before you trust this skill, listed below with the exact line each was found on.

What can Dokploy Deploy access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

How current is this page?

The grade is for one exact copy of the source (ae618ef5da66), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement