docker-composer
Provides expert guidance on creating Docker Compose configurations and Dockerfiles for efficient container orchestration.
Install this skill
or
73/100
Security score
The docker-composer skill was audited on Feb 9, 2026 and we found 15 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 253
Template literal with variable interpolation in command context
SourceSKILL.md
| 253 | ```yaml |
medium line 461
Template literal with variable interpolation in command context
SourceSKILL.md
| 461 | ```yaml |
medium line 727
Curl to non-GitHub URL
SourceSKILL.md
| 727 | CMD curl -f http://localhost:3000/api/health || exit 1 |
low line 487
Webhook reference - potential data exfiltration
SourceSKILL.md
| 487 | # Local Stripe webhooks |
low line 490
Webhook reference - potential data exfiltration
SourceSKILL.md
| 490 | command: listen --api-key ${STRIPE_SECRET_KEY} --forward-to http://app:3000/api/webhooks/stripe |
low line 268
Access to .env file
SourceSKILL.md
| 268 | - .env.production |
low line 598
Access to .env file
SourceSKILL.md
| 598 | .env |
low line 599
Access to .env file
SourceSKILL.md
| 599 | .env.* |
low line 600
Access to .env file
SourceSKILL.md
| 600 | !.env.example |
low line 283
External URL reference
SourceSKILL.md
| 283 | test: ["CMD", "curl", "-f", "http://localhost:3000/api/health"] |
low line 396
External URL reference
SourceSKILL.md
| 396 | - API_URL=http://api:4000 |
low line 490
External URL reference
SourceSKILL.md
| 490 | command: listen --api-key ${STRIPE_SECRET_KEY} --forward-to http://app:3000/api/webhooks/stripe |
low line 512
External URL reference
SourceSKILL.md
| 512 | ELASTICSEARCH_HOSTS: http://elasticsearch:9200 |
low line 563
External URL reference
SourceSKILL.md
| 563 | - BASE_URL=http://app:3000 |
low line 727
External URL reference
SourceSKILL.md
| 727 | CMD curl -f http://localhost:3000/api/health || exit 1 |
Scanned on Feb 9, 2026
View Security DashboardGitHub Stars 106
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
majiayu000/claude-skill-registry