The Agent Skills Directory

[SAFE]: The skill is a legitimate security auditing tool designed to check Dockerfiles and Compose files for common misconfigurations and security risks.
[COMMAND_EXECUTION]: Employs standard Unix utilities including find, grep, and awk to perform static analysis on project files. It also utilizes established external security tools such as hadolint, trivy, dockle, and docker scout for deep scanning.
[EXTERNAL_DOWNLOADS]: Mentions installation of security tools via Homebrew (brew install), which is a well-known and trusted package management service.
[DATA_EXFILTRATION]: While the skill scans for sensitive patterns like ENV.*PASSWORD and ARG.*SECRET, it does so locally to report findings to the user and does not transmit this data to any external destinations.
[PROMPT_INJECTION]: Instructions are focused on analysis tasks and do not attempt to bypass agent safety filters or override system behavior.

docker-audit