caddy
Manages Caddy web server operations with zero-downtime deployments, secret management, and custom builds across multiple environments.
Install this skill
Security score
The caddy skill was audited on Feb 9, 2026 and we found 27 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 662 | curl -X POST http://localhost:2019/load \ |
Curl to non-GitHub URL
| 697 | curl -f https://alpha.truthforge.terraphim.cloud/health |
Curl to non-GitHub URL
| 698 | curl -f https://ci.terraphim.cloud/health |
Curl to non-GitHub URL
| 723 | curl -f https://domain.com/health |
Curl to non-GitHub URL
| 804 | curl -sf https://domain.com/health |
Access to hidden dotfiles in home directory
| 54 | # See: ~/.claude/skills/1password-secrets.md |
Access to hidden dotfiles in home directory
| 97 | Server configuration details: `~/.docs/caddy-skill/servers.json` |
Access to hidden dotfiles in home directory
| 204 | cat ~/.docs/caddy-skill/servers.json | jq -r '.servers.bigbox' |
Access to hidden dotfiles in home directory
| 413 | # See: ~/.claude/skills/1password-secrets.md Workflow 1 |
Access to hidden dotfiles in home directory
| 835 | See: `~/.claude/skills/1password-secrets.md` for detailed secret management workflows. |
Access to hidden dotfiles in home directory
| 879 | - **1Password Secret Management**: `~/.claude/skills/1password-secrets.md` |
Access to hidden dotfiles in home directory
| 891 | **Server Configuration:** `~/.docs/caddy-skill/servers.json` |
Access to hidden dotfiles in home directory
| 892 | **Pattern Library:** `~/.docs/caddy-skill/patterns/` (coming soon) |
Access to .env file
| 318 | ⚠️ GITHUB_CLIENT_ID (defined in caddy_complete.env) |
Access to .env file
| 319 | ⚠️ GITHUB_CLIENT_SECRET (plaintext in caddy_complete.env) |
Access to .env file
| 320 | ⚠️ JWT_SHARED_KEY (plaintext in caddy_complete.env) |
Access to .env file
| 407 | cat caddy_complete.env | grep "VAR_NAME=" |
Access to .env file
| 467 | Solution 1: Define in caddy_complete.env |
Access to .env file
| 829 | 1. Detect plaintext secrets in `caddy_complete.env` |
Access to .env file
| 830 | 2. Use 1Password skill (Workflow 2: Generate Template) to create `.env.template` |
External URL reference
| 460 | Documentation: https://caddyserver.com/docs/... |
External URL reference
| 603 | ✓ Test endpoint: https://alpha.truthforge.terraphim.cloud/health → 200 OK |
External URL reference
| 662 | curl -X POST http://localhost:2019/load \ |
External URL reference
| 697 | curl -f https://alpha.truthforge.terraphim.cloud/health |
External URL reference
| 698 | curl -f https://ci.terraphim.cloud/health |
External URL reference
| 723 | curl -f https://domain.com/health |
External URL reference
| 804 | curl -sf https://domain.com/health |