docker-compose-orchestration

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains many Docker Compose examples that embed plaintext secrets and passwords (environment variables like POSTGRES_PASSWORD, MYSQL_ROOT_PASSWORD, JWT_SECRET, MINIO_SECRET_KEY, etc.), which would require the LLM to reproduce those secret strings verbatim when generating or editing compose files — an insecure secret-handling pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes multiple examples that mount the host Docker socket, bind or expose sensitive host paths (including / and /var/run/docker.sock) and shows running commands as root in containers, which enable an agent or containers to modify or take control of the host system.