init
Warn
Audited by Socket on Feb 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is largely benign and coherent with its stated purpose of generating Docker scaffolding for multiple runtimes. The primary concern is the deliberate omission of a version field in docker-compose.yaml, which could cause compatibility issues or misconfigurations in some environments. Additionally, ensuring the produced Dockerfiles use pinned/base images and proper security configurations (non-root users, non-root ports, and explicit HEALTHCHECKs) would strengthen the safety posture. Otherwise, the footprint is normal for a Docker scaffolding tool.
Confidence: 75%Severity: 75%
Audit Metadata