監査履歴

The static analyzer reported many severe patterns, but review shows most are Markdown examples or Hadolint configuration references, not hidden malicious behavior. The skill is safe to publish with a warning because it encourages external command execution and includes an unverified network installer pattern.

This is a pure documentation skill with no executable code. All 200 static findings are false positives triggered by documentation examples showing Dockerfile patterns. The skill provides legitimate security documentation for Hadolint, an open-source Dockerfile linter. No scripts, network calls, or filesystem modifications exist. Behavior matches the stated purpose of Dockerfile security linting guidance.

This is a pure documentation skill with no executable code. All 200 static findings are false positives triggered by documentation examples showing Dockerfile patterns. The skill provides legitimate security documentation for Hadolint, an open-source Dockerfile linter. No scripts, network calls, or filesystem modifications exist. Behavior matches the stated purpose of Dockerfile security linting guidance.

This is a pure documentation and configuration skill with no executable code. The skill provides guidance for using Hadolint, an open-source Dockerfile linter, along with CI/CD templates and configuration files for container security validation. No scripts, network calls, or file system access beyond reading user-provided Dockerfiles. All behavior matches the stated purpose of Dockerfile security linting.

This is a pure documentation and configuration skill with no executable code. The skill provides guidance for using Hadolint, an open-source Dockerfile linter, along with CI/CD templates and configuration files for container security validation. No scripts, network calls, or file system access beyond reading user-provided Dockerfiles. All behavior matches the stated purpose of Dockerfile security linting.

This is a pure documentation and configuration skill with no executable code. The skill provides guidance for using Hadolint, an open-source Dockerfile linter, along with CI/CD templates and configuration files for container security validation. No scripts, network calls, or file system access beyond reading user-provided Dockerfiles. All behavior matches the stated purpose of Dockerfile security linting.