docker

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's examples and parameters allow embedding plaintext environment variables (e.g., POSTGRES_PASSWORD=secret) directly into docker command arguments, which would require the LLM to include secret values verbatim in generated commands.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill's troubleshooting instructions explicitly tell the user to run sudo systemctl start docker and sudo usermod -aG docker $USER, which instructs modification of system services and user group membership (requires elevated privileges), so it pushes changes to the host system state.