Security audit
Security checks for vulnerabilities and agentic risk
This is a Dockerfile optimization guide skill with purpose-aligned examples and no evidence of hidden execution, exfiltration, persistence, or destructive host behavior.
Install only if you want an agent to help rewrite or review Dockerfiles. Treat generated Dockerfile changes as production-impacting code: review base image swaps, user/permission changes, health checks, exposed ports, package removals, and secret handling, then build and test before deploying.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
git
curl &&
apt-get clean &&
rm -rf /var/lib/apt/lists/*
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
git
curl &&
apt-get clean &&
rm -rf /var/lib/apt/lists/*
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
npm-debug.log
.git
.gitignore
.env
.env.local
*.md
.vscode
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
.git
.gitignore
.env
.env.local
*.md
.vscode
.idea
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
.git
.gitignore
.env
.env.local
*.md
.vscode
.idea
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
RUN --mount=type=secret,id=npmrc,target=/root/.npmrc \
npm install
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
RUN --mount=type=secret,id=npmrc,target=/root/.npmrc \
npm install
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
The skill is broadly framed as automatically analyzing and optimizing Dockerfiles without clear trigger constraints, safety boundaries, or scope checks. In an agent setting, this can cause the skill to activate on loosely related requests and generate invasive or risky modifications to build artifacts, increasing the chance of unsafe changes being proposed or applied.
The skill lacks a prominent warning that generated optimizations may alter runtime behavior, compatibility, observability, package availability, libc behavior, port binding, health checks, or debugging workflows. Because the skill recommends aggressive changes like Alpine, scratch, distroless, non-root users, and production server swaps, users may adopt changes that break applications or silently weaken operational assumptions.
Code issues a request to a loopback, link-local, or private-range host. This can reach internal services not meant to be exposed and is a common SSRF pivot.
# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s \
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health').read()"
# Run with gunicorn for production
CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "4", "app:app"]
Code issues a request to a loopback, link-local, or private-range host. This can reach internal services not meant to be exposed and is a common SSRF pivot.
# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s \
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health').read()"
# Run with gunicorn for production
CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "4", "app:app"]
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
WORKDIR /app
# Don't run as root
RUN addgroup -g 1001 -S nodejs && \
adduser -S nextjs -u 1001
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
apt-get install -y --no-install-recommends \
build-essential \
gcc && \
rm -rf /var/lib/apt/lists/*
WORKDIR /app
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
apt-get install -y --no-install-recommends \
build-essential \
gcc && \
rm -rf /var/lib/apt/lists/*
WORKDIR /app
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
apt-get install -y --no-install-recommends \
build-essential \
gcc && \
rm -rf /var/lib/apt/lists/*
WORKDIR /app
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
apt-get install -y --no-install-recommends \
build-essential \
gcc && \
rm -rf /var/lib/apt/lists/*
WORKDIR /app
No suspicious patterns detected.