Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Docker Compose deployment checklist with no hidden code or evidence of credential theft or persistence beyond normal service deployment guidance.
Before using it, confirm the target host, ports, firewall rules, backups, and maintenance window because docker compose up -d --build may rebuild images and change running containers. Keep real secrets out of source control and store only the needed environment values on the deployment host.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
/opt/app-name/
docker-compose.yml
.env
data/
config/
logs/
Natural-language policy violations apply to all file types, including markdown. The file forces a specific language for all instructions and headings, with no opt-in, alternate language, or explanation that the skill is intentionally region- or locale-specific.
This is a markdown file, so missing user warnings apply to described behaviors that could affect system integrity. The document instructs the user to run a deployment command that changes the runtime environment, but it does not explicitly warn about service impact such as restarting containers or replacing an existing deployment.
This manifest presents the skill name and description only in Chinese, with no indication that users can choose another language or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation unless clearly documented and justified.
No suspicious patterns detected.