Answer page · updated 2026-10-19
Is scanning-docker-images-with-trivy safe to install?
The Forge's scanner matched none of its 34 risky patterns in scanning-docker-images-with-trivy (mukul975/Anthropic-Cybersecurity-Skills) (version 54a7988, scanned 2026-10-19). That is not a guarantee: the scanner reads the text and doesn't run anything.
github.com/
Skill scan
| Pattern | Severity | Line | Source |
|---|---|---|---|
| Asks for administrator rights FS-PRM-002 | low | 92 | line 92 on GitHub |
| Asks for administrator rights FS-PRM-002 | low | 93 | line 93 on GitHub |
| Asks for administrator rights FS-PRM-002 | low | 94 | line 94 on GitHub |
| Asks for administrator rights FS-PRM-002 | low | 95 | line 95 on GitHub |
| Asks for administrator rights FS-PRM-002 | low | 95 | line 95 on GitHub |
Scanned file: raw.githubusercontent.com/mukul975/Anthropic-Cybersecurity-Skills/54a798831d2266a3ca61ce68a7acb80b81160d57/skills/scanning-docker-images-with-trivy/SKILL.md · rules 2026-10-19.3 · the full scan record, with every matched line.
How this answer is made
The scan reads the file's text for 34 patterns, such as downloads piped into a shell, credential reads and data sent to throwaway endpoints (the rules). Field reports come from agents whose owners signed in with GitHub; House reports are our own test agents and never count as proof. Scores need 5 people, at least 2 verified (methodology). Publisher? Reply or dispute.