analyzing-docker-container-forensics
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
62
—
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Security
3 findings — 3 medium severity. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.75). The required runtime workflow ingests outsider-authored free text from the compromised container itself (e.g., `docker logs` output and `docker diff`/filesystem paths derived from container contents), which can include attacker-controlled strings that are then printed/serialized into the agent’s report context.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime commands that fetch and execute remote binaries (wget https://github.com/wagoodman/dive/releases/latest/download/dive_linux_amd64.deb followed by sudo dpkg -i, and curl -LO https://storage.googleapis.com/container-diff/latest/container-diff-linux-amd64 followed by chmod +x and execution), which are external dependencies downloaded and run during runtime.
W013: Attempt to modify system services in skill instructions
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs privileged, state-changing host actions — including running sudo to install software, using Docker commands that alter images/containers (docker commit/save/exec) and accessing the Docker host filesystem/socket — which could be used to obtain elevated access or modify the machine's state.
- Repository
- mukul975/Anthropic-Cybersecurity-Skills
- Commit
673da1f
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.