dockerfile-skill

SUSPICIOUS: mostly coherent as a Dockerfile/build-validation skill, but its footprint is broader than generation alone and it contains conflicting instructions about confirmations and secrets. The main risks are autonomous execution of untrusted project builds/containers, medium supply-chain exposure from building arbitrary repos and dependencies, and inconsistent secret-handling language rather than confirmed exfiltration or malware.