docker-privesc

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly reads and outputs sensitive files (e.g., /etc/shadow) and instructs injecting/printing SSH keys/authorized_keys, which requires handling secret or credential material verbatim and thus poses high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is a high-risk, intentionally malicious how-to: it provides explicit, actionable commands to escape Docker containers, obtain host root, steal credentials, and install persistent backdoors.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs container escape and host compromise techniques that modify host system state (e.g., appending a UID 0 user to /etc/passwd, injecting root SSH keys, creating SUID binaries, and running privileged containers via the Docker socket), which directly push the agent to compromise the machine.