docker-local

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes plaintext secrets (MYSQL_ROOT_PASSWORD=root) and shows commands that pass database passwords inline (e.g., mysql -u root -p), which encourages embedding secrets verbatim in generated commands.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt includes explicit elevated-privilege and state-changing commands (sudo lsof, docker compose down -v, docker compose exec ... chown) that can modify host filesystem state and cause data loss, so it does push an agent toward altering the machine.