yashandb-docker

SUSPICIOUS: the skill is broadly aligned with Docker deployment of YashanDB, but install trust is weakened by a third-party mirror as the recommended source, an unverified Docker Hub image reference, mutable/unpinned artifacts, and a hardcoded default database password. Data flow appears local to Docker with no clear exfiltration, so this is not confirmed malware, but it carries medium security risk.