docker-docs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes a plaintext password value ("secret") in the docker-compose example, which would require the model to reproduce that secret verbatim when outputting or copying the snippet.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The documents include commands that fetch and execute remote installer scripts at runtime (curl -fsSL https://get.docker.com | sudo sh in getting-started.md and scout-desktop.md, and curl -s https://raw.githubusercontent.com/k3d-io/k3d/main/install.sh | bash in kubernetes.md), which are runtime external dependencies that execute remote code.