DockSec
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
Supply asset profile
Coding and developer agents
Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.
Scenario
Coding agents
I need a coding agent that can understand a repository, edit code, and review pull requests.
Agent fit
Claude Code + CLI + Codex
Codex, Claude Code, Cursor, CLI, or custom agents.
Install
Ready
npx skills add OWASP/DockSec
Maintenance
fresh
13d since push
Risk
Safe to try
Quality score needs review
GitHub quality
434
84/100 quality · 81/100 trust
Coverage tags
Review notes
Quality score needs review
Agent adoption scorecard
Trust, audit, and install readiness at a glance
These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.
Quality
StrongSolid option that is likely worth shortlisting for production workflows.
Trust
Sandbox onlyUseful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.
Audit
Safe to tryInstall readiness, security metadata, maintenance, and adoption risk.
Trust Score v5
Human review before install
Run only in a sandbox and compare close alternatives before using it for real work.
Stars
434 GitHub stars
Repo activity
434 stars, 80 forks
Maintenance
13d since push
License
MIT
Install
npx skills add OWASP/DockSec
Install safety
standard package or runtime install path
Permission surface
filesystem or document access
Agent outcomes
No agent outcome data yet
Docs
Strong README/SKILL.md context
Risk summary
Review before production
- Quality score needs review
Install readiness
Install path available
- Install path is available
- Repository evidence is available
- License is declared
- No Agent Proven outcome evidence yet
Agent-readable metadata
Machine-readable decision data for this skill.
Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.
Suited tasks
- Security and compliance workflows
- Claude Code teams
- builders willing to evaluate younger projects
- Inspect risky files
Suited agents
Install decision
- Command
- npx skills add OWASP/DockSec
- Policy
- review
- Human review
- yes
Trust and risk
- Trust
- 73/100
- Audit
- 87/100
- Risk level
- Safe to try
Outcome loop
- Endpoint
- /api/agent/outcome
- Event ID
- resolve
- Outcomes
- 5
Do not use when
- teams that need a vendor-supported SLA
- high-compliance environments without internal security review
- No major risk signals from current metadata
- Quality score needs review
- Production credentials, payments, or irreversible account changes without explicit human review
Agent safety v2
71/100 · Review before install
Good audit and safety signals with no high-risk permission hints in public metadata.
Review the audit page, then allow agent install in a sandboxed workflow.
medium
Network access
Skill likely fetches remote pages, APIs, repositories, or external services.
medium
Filesystem access
Skill may read or write project files, documents, generated artifacts, or local workspace state.
- Quality score needs review
Install targets
Install this skill in your agent workflow
Copy the registry command or an agent-specific install prompt for Codex, Claude Code, and Cursor.
OpenAgentSkill CLI
Use the registry command when your workflow supports the OpenAgentSkill installer.
$ npx skills add OWASP/DockSecAgent resolve plan
Let an agent verify fit before installing.
The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.
Resolve JSON
/api/agent/resolve?task=Use%20DockSec%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Resolve text
/api/agent/resolve?task=Use%20DockSec%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text
Install handoff
/api/skills/owasp-docksec/install
Agent should check
- Task fit and alternatives from Resolve API.
- Audit score, trust score, and safety policy warnings.
- Install target compatibility for Codex, Claude Code, Cursor, or CLI.
Copy prompt
Task: Use DockSec in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20DockSec%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/owasp-docksec/install
Install command: npx skills add OWASP/DockSec
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.Agent handoff
Give an agent the install path, not another directory page.
Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.
Install handoff
/api/skills/owasp-docksec/install
LLM text format
/api/skills/owasp-docksec/install?format=text
Find alternatives
/api/skills/search?q=DockSec&limit=3
Agent prompt
Use DockSec for this task. Review https://www.openagentskill.com/api/skills/owasp-docksec/install, then install with: npx skills add OWASP/DockSecRegistry metadata
Agent-readable profile for automatic skill selection.
This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.
Manifest
/api/registry/manifest/owasp-docksec
LLM text
/api/registry/manifest/owasp-docksec?format=text
Install alias
/api/registry/install/owasp-docksec
Recommend
/api/registry/recommend?task=Use%20DockSec%20in%20an%20agent%20workflow&limit=3
Agent fit
Security and compliance
Platforms
Python, Security, Claude Code
Audit report
Safe to try · 87/100
Review install readiness, maintenance, trust, quality, and metadata warnings before adding this skill to an agent workflow.
Agent decision cockpit
Primary pick for Security and compliance
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Role in stack
Primary pick
Primary fit
Security and compliance
Trust label
Production-ready
Install path
Command ready
Use when
- Security and compliance workflows
- Claude Code teams
- builders willing to evaluate younger projects
Evidence
- recent repository activity
- install command or GitHub repo available
- 84/100 quality profile
- 7 OpenAgentSkill engagement events
Review first
- No major risk signals from current metadata
Implementation path
- 1Install it in a sandbox agent and run one Security and compliance task end to end.
- 2Compare output quality, latency, and failure behavior against at least one alternative.
- 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.
Trust profile
Sandbox only
Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.
GitHub adoption
INFO434 GitHub stars
Stars/forks activity
INFO434 stars, 80 forks; issue activity unavailable in current metadata
Recent maintenance
PASS13d since push
License clarity
PASSMIT
Good signals
- AI review approved
- Install path is available
- Repository evidence is available
- Recently maintained repository
- Install command has no obvious high-risk pattern
- Outcome loop is ready but needs first real agent run
Review before install
- Quality score needs review
- No real agent outcome reports yet
- Human review required before unattended installation
Recommended action
Run only in a sandbox and compare close alternatives before using it for real work.
Quality profile
Strong candidate for agent workflows
Solid option that is likely worth shortlisting for production workflows.
Workflow fit
Use this skill in these scenarios
Reduce risk
Security and compliance
I need my agent to scan a project for security risks and summarize what needs attention.
Build and ship code
Coding agents
I need a coding agent that can understand a repository, edit code, and review pull requests.
Search private knowledge
RAG and knowledge
I need my agent to build a RAG workflow over documents and retrieve reliable context.
Stack fit
Add it to a complete workflow
Turn skills into distribution
Content growth agent
A stack for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.
Inspect, patch, and verify code
Coding review agent
A stack for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.
Ingest, retrieve, and cite
RAG knowledge base
A stack for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.
Alternative shortlist
Compare before you install
Similar skills in this category, ranked with the same readiness and quality signals.
Maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
Nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Infisical
Infisical is the open-source platform for secrets, certificates, and privileged access management.
Wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Overview
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
Imported by the skill-only GitHub discovery pipeline because it matches agent skill, automation, domain workflow, RAG, document-processing, data, finance, security, or developer-tool signals. Protocol-server projects are excluded from automated imports.
Platform Compatibility
Technical Details
- Version
- 1.0.0
- License
- MIT
- Last Updated
- 6/21/2026
- Published
- 6/21/2026
Frameworks & Tools
Decision snapshot
Primary pick
recent repository activity
Audit snapshot
Install review
Install and adoption review
- Security
- 86/100
- Maintenance
- 100/100
- Install
- 92/100
Agent-proven evidence
Agent Proven evidence
Outcome reports after resolve, review, install, and one narrow run.
- Success rate
- —
- Recent failure
- —
- Outcomes
- 0
- Output quality
- —
- Failed
- 0
- Not relevant
- 0
- Installs
- 0
- Risk blocked
- 0
- Setup needed
- 0
- Production
- 0
No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.
Install
Add to agent workflow
Free and open source. Review the audit before production use.
Growth loop
Share kit
Scenario-led draft for DockSec, ready for a manual X post.
A good workflow skill turns repeated manual steps into something an agent can safely replay. DockSec helps agents move a repeatable workflow out of manual copy-paste. 434 stars https://www.openagentskill.com/skills/owasp-docksec?ref=x #AIAgents
Optional reply with install command
Listing + install path for DockSec: https://www.openagentskill.com/skills/owasp-docksec?ref=x Install: npx skills add OWASP/DockSec
Listing source
Community indexed
This listing was indexed from public sources and is not marked official until a maintainer claim is approved.
- Creator
- OWASP
- Source
- OWASP/DockSec
- Indexed by
- OpenAgentSkill community index
Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.
Claim this skillOwner claim
Claim this skill listing
This community indexed listing is attributed to OWASP but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.
README badge
Add this badge to your GitHub README to show the listing, trust score, and install handoff.
[](https://www.openagentskill.com/skills/owasp-docksec)Author
OWASP
@owasp
Platform Fit
Health Signals
- GitHub stars
- 434
- Quality score
- 52/100
- Last GitHub push
- Jun 20, 2026
- Framework hints
- 2
- OpenAgentSkill views
- 4
- Install copies
- 0
- Outbound clicks
- 0
Community Signal
Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.
Trust & Safety
Sandbox only
- GitHub adoption434 GitHub starsINFO
- Stars/forks activity434 stars, 80 forks; issue activity unavailable in current metadataINFO
- Recent maintenance13d since pushPASS
- License clarityMITPASS
- README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
- Dependency/runtime riskexternal package install surfaceINFO
Related Skills
Maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
32.9K stars · 0 installsNuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
29.2K stars · 0 installsInfisical
Infisical is the open-source platform for secrets, certificates, and privileged access management.
27.4K stars · 0 installsWazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
15.9K stars · 0 installs