Back to skill

Security audit

Docker Compose Linter

Security checks for vulnerabilities and agentic risk

Overview

No concrete malicious or review-worthy behavior was evidenced by the supplied scan context, but the actual skill artifacts were not available for direct inspection.

Install only after reviewing the skill's actual files and metadata, because this adjudication had clean scanner context but lacked direct artifact text for a full coherence review.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.