NYC

docker-compose-production

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill includes instructions that mount the host filesystem and docker socket, run privileged containers and bind host device paths (e.g., /:/host, /var/run/docker.sock, privileged: true, driver_opts device: /data/postgres), which enable an agent that executes the compose to alter or compromise the host state even though it doesn't explicitly call for sudo or user creation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:52 PM