docker-k8s

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The content is generally legitimate security guidance but includes examples that could weaken security boundaries (overbroad secrets RBAC, an unconstrained ArgoCD image-updater tag pattern, and an outbound build-time scan), which is suspicious steering without clear malicious intent.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill contains Dockerfile RUN steps and other commands that modify system/kernel settings, alter file permissions, install system packages and create users (e.g. sysctl, find ... chmod a-s, apt-get installs, copying to /etc, useradd), which — if executed on the host — would change the machine's state and can be harmful.