docker-compose-launch — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited docker-compose-launch (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill only when the selected implementation workflow explicitly needs local services before app startup, migrations, or tests can run. Keep all service startup scoped to the assigned worktree and treat Docker Compose as a reusable helper for local implementation and test dependencies only.
The parent implementation skill should pass or infer this contract before acting:
required: true or falseworktree_path: absolute path to the assigned worktreeservice_types: one or more of mysql, mariadb, postgres, or mongodbreason: short explanation of which app, package, migration, or test command needs the servicespreferred_mechanism: repository-native compose file, repo script, or fallback compose generationIf required is false, return status: not_needed and do nothing else.
docker-compose.yml, docker-compose.yaml, compose.yml, or compose.yaml files before generating new files.Return a concise structured summary using these fields:
status: ready, not_needed, or failedservices: services that were started or detectedmechanism: repo_compose, repo_script, or generated_fallbackcommands: startup, readiness, and teardown commandsconnection: host, port, database, username, URL, or env hints when availablecleanup: explicit stop command, or noneartifacts: compose files or env files created or reusednotes: concise caveats or follow-up steps~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.