dockerfile-validator
Warn
Audited by Socket on Mar 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The Dockerfile validator skill is internally consistent with its stated purpose. It uses deterministic, local-file-based validation steps, conditional reference loading, and clear fallbacks. There are no suspicious data flows or credential requirements evident in the fragment. Overall risk remains low to moderate given its described scope, with no evident malicious patterns.
Confidence: 75%Severity: 75%
Audit Metadata