orbstack-best-practices
Provides best practices for managing OrbStack Linux VMs and Docker on macOS, enhancing performance and integration.
Install this skill
or
70/100
Security score
The orbstack-best-practices skill was audited on Feb 12, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 228
Curl to non-GitHub URL
SourceSKILL.md
| 228 | curl https://mycontainer.orb.local |
medium line 59
Access to hidden dotfiles in home directory
SourceSKILL.md
| 59 | | `~/.orbstack/ssh/id_ed25519` | SSH private key | |
medium line 60
Access to hidden dotfiles in home directory
SourceSKILL.md
| 60 | | `~/.orbstack/config/docker.json` | Docker daemon config | |
medium line 201
Access to hidden dotfiles in home directory
SourceSKILL.md
| 201 | **JetBrains**: Host `localhost`, Port `32222`, Key `~/.orbstack/ssh/id_ed25519` |
medium line 313
Access to hidden dotfiles in home directory
SourceSKILL.md
| 313 | Docker daemon config at `~/.orbstack/config/docker.json`: |
low line 159
External URL reference
SourceSKILL.md
| 159 | - Custom proxy: `orb config set network_proxy http://proxy:8080` |
low line 218
External URL reference
SourceSKILL.md
| 218 | # Access: http://web.orb.local (no port needed for web servers) |
low line 228
External URL reference
SourceSKILL.md
| 228 | curl https://mycontainer.orb.local |
low line 318
External URL reference
SourceSKILL.md
| 318 | "registry-mirrors": ["https://mirror.gcr.io"] |
low line 327
External URL reference
SourceSKILL.md
| 327 | mac open https://example.com # Open URL in macOS browser |
Scanned on Feb 12, 2026
View Security DashboardInstall this skill with one command
/learn @neversight/orbstack-best-practices