The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The Docker Compose templates and environment variable examples include default placeholder credentials such as secret, rootsecret, and guest.
Evidence: Found in SKILL.md and reference/services.md (e.g., POSTGRES_PASSWORD: ${DB_PASSWORD:-secret}).
Mitigation: The skill correctly advises users to create a .env file for actual credentials and avoid hardcoding secrets in the compose.yml file.
[COMMAND_EXECUTION]: The skill is primarily designed to facilitate the execution of Docker Compose commands to manage container lifecycles, logs, and interactive shells.
Evidence: reference/dev-workflow.md lists commands like docker compose up -d, docker compose down -v, and docker compose exec.
[PRIVILEGE_ESCALATION]: The documentation includes instructions for gaining root access inside running containers for troubleshooting purposes.
Evidence: reference/dev-workflow.md contains the command docker compose exec -u root app sh.
Context: This is a standard administrative capability for container management and is presented within the context of developer workflows.

docker-compose-skill