Security audit
Docker Compose Optimizer
Security checks for vulnerabilities and agentic risk
Overview
This is a simple Docker Compose review skill that only instructs read-only local inspection and gives configuration advice.
Install this if you want help reviewing Docker Compose files. Run it only in the project you mean to analyze, review any suggested changes before applying them, and avoid exposing Compose files with real secrets unless you are comfortable sharing those values with the agent.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.