Security audit
Docker Compose Helper
Security checks across malware telemetry and agentic risk
Overview
This skill is a small Docker Compose command reference with no installer, executable files, persistence, credential handling, or hidden behavior found.
Install only if you are comfortable letting your agent suggest local Docker and Docker Compose commands. Be careful sharing container logs, because logs can contain secrets or private application data; the sponsored external links are promotional and not needed for the skill to work.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.