docker-compose-production
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill includes instructions that mount the host filesystem and docker socket, run privileged containers and bind host device paths (e.g., /:/host, /var/run/docker.sock, privileged: true, driver_opts device: /data/postgres), which enable an agent that executes the compose to alter or compromise the host state even though it doesn't explicitly call for sudo or user creation.
Audit Metadata