Skill audit report
docker-deploy Audit report.
Docker deployment validation and container sanity checks
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
WARN48
36 GitHub stars
Stars/forks activity
WARN43
36 stars, 1 forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
6d since push
License clarity
PASS86
MIT
README/SKILL.md completeness
WARN60
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
INFO80
external package install surface
Install availability
PASS92
npx skills add 00200200/cinch --skill docker-deploy
Install command safety
PASS92
standard package or runtime install path
Permission surface
PASS100
no high-risk permission surface in public metadata
Repository evidence
PASS86
https://github.com/00200200/cinch/tree/main/examples/skills/docker-deploy
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add 00200200/cinch --skill docker-deploy
Repository
88
https://github.com/00200200/cinch/tree/main/examples/skills/docker-deploy
License
86
MIT
Maintenance
100
6d since push
AI review
55
SKILL.md is very brief and lacks details on prerequisites, expected environment, and how to use the skill.
README/SKILL.md completeness
84
Usable description available
Dependency risk
80
external package install surface
Install command safety
92
standard package or runtime install path
Permission surface
100
no high-risk permission surface in public metadata
Stars/forks activity
43
36 stars, 1 forks; issue activity unavailable in current metadata
Adoption
42
36 GitHub stars
Warnings
- SKILL.md is very brief and lacks details on prerequisites, expected environment, and how to use the skill.
- The description claims the script verifies non-root user and minimal base images, but verify.sh only runs `docker build --check` and does not perform those checks.
- The script assumes Docker is installed and the user is in a directory with a Dockerfile, but this is not documented.
- Low GitHub adoption signal
- Quality score needs review
- GitHub adoption: 36 GitHub stars
- Stars/forks activity: 36 stars, 1 forks; issue activity unavailable in current metadata
- README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options