docker-basics
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The Linux installation section includes the command "curl -fsSL https://get.docker.com | sudo sh", which fetches and immediately executes remote code from https://get.docker.com at runtime, creating a high-risk external runtime dependency.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly recommends a sudo command that changes system group membership ("sudo usermod -aG docker $USER"), which modifies host state and can grant root-equivalent access (docker group = root), so it encourages potentially dangerous privileged changes.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata