hardening-docker-daemon-configuration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime command that fetches and pipes a remote installer to the shell (curl -fsSL https://get.docker.com/rootless | sh), which downloads and executes remote code as part of the Rootless Docker setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs privileged, state-changing actions (editing /etc/docker/daemon.json, creating/moving certs under /etc, chown/chmod of /var/run/docker.sock, running sudo/systemctl/apparmor_parser/auditctl) that require root/sudo and directly modify the host, so it can compromise the machine.