init

Warn

Audited by Socket on Feb 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is largely benign and coherent with its stated purpose of generating Docker scaffolding for multiple runtimes. The primary concern is the deliberate omission of a version field in docker-compose.yaml, which could cause compatibility issues or misconfigurations in some environments. Additionally, ensuring the produced Dockerfiles use pinned/base images and proper security configurations (non-root users, non-root ports, and explicit HEALTHCHECKs) would strengthen the safety posture. Otherwise, the footprint is normal for a Docker scaffolding tool.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 27, 2026, 11:30 AM
Package URL
pkg:socket/skills-sh/mwguerra%2Fclaude-code-plugins%2Finit%2F@2df77d0a9489a63363b608240c22cd890703840c