docker

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly documents and encourages privileged host operations—editing /etc/docker/daemon.json and system unit files, running systemctl, installing via the get.docker.com script, and adding users to the docker group (which grants root-equivalent access via /var/run/docker.sock)—which push the agent to modify system state and escalate privileges.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 06:46 AM