docker-compose

The Docker Compose skill presents a consistent, safety-aligned surface: it documents legitimate orchestration commands, failure modes, and best practices for multi-container deployments. There are no download/install-from-unknown-source patterns, no credential harvesting flows, and no out-of-band data exfiltration. The main proportional risk stems from users placing sensitive data in compose files or environment variables; this is a standard operational consideration rather than a capability of the skill itself. Overall, the footprint is benign and aligned with its stated purpose, with only minor operational data-sensitivity considerations.