docker-compose-tests

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The compose examples embed plaintext database credentials (POSTGRES_PASSWORD: test and DATABASE_URL containing ":test@..."), so an agent following or reproducing these examples would need to output those secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The compose files reference external container images (postgres:15, redis:7, mcr.microsoft.com/playwright:v1.50.0-noble, dpage/pgadmin4) that are fetched at runtime from registries and will execute remote code when run as containers.