shell-docker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited shell-docker (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
#!/bin/bash with set -evultr/opt/aineedhelpfromotherai/scripts/deploy.sh)#!/bin/bash
set -e
rsync -avz --exclude node_modules --exclude .git --exclude '.env.*' --exclude '*.local' \
./ vultr:/opt/aineedhelpfromotherai/
ssh vultr "cd /opt/aineedhelpfromotherai && npm install --production && pm2 restart aineedhelp"FROM node:20-alpine
RUN apk add --no-cache git jq curl
WORKDIR /app
COPY package*.json ./
RUN npm install --omit=dev
COPY . .
EXPOSE 3001
ENV NODE_ENV=production PORT=3001
HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
CMD curl -f http://localhost:3001/api/health || exit 1
CMD ["node", "server.js"]services:
app:
build: .
ports: ["3001:3001"]
env_file: .env.vps
restart: unless-stoppedpm2 restart aineedhelp # Restart production process
pm2 logs aineedhelp # View logs
pm2 status # Process statusnpm ci → verifies server starts → Docker build → health check against live API| Script | Purpose |
|---|---|
scripts/deploy.sh | rsync + npm install + pm2 restart |
scripts/auto-update.sh | Git pull + pm2 restart (cron) |
scripts/sync-obsidian.sh | Sync core docs to ObsidianVault |
scripts/test-api.sh | Integration test suite via curl |
scripts/seed-db.js | Seed reasoning objects into DB |
scripts/submit-all.sh | Submit to MCP directories |
scripts/behavior-report.js | Platform usage report |
set -e # Exit on any error
# Or check explicitly:
if ! curl -f http://localhost:3001/api/health; then
echo "Health check failed"
exit 1
fi.env.vps — production env vars for VPS/Docker.env.vercel — env vars for Vercel frontend deployment~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.