Generate and lint Dockerfiles for common languages and frameworks. Use when creating container configs.

This skill appears to do what it claims and has no network or credential access. Before installing/using it, be aware that: (1) the script will read any file you ask it to scan/lint — do not point it at sensitive system files or files containing secrets unless you intend to analyze them; (2) the shell script uses unquoted variables and has small bugs (e.g., literal '$2' output), so avoid passing untrusted or specially crafted filenames (filenames with spaces or strange characters) to the commands; and (3) while no external exfiltration is present in the bundle, always audit any future updates or similarly named skills before trusting them.

Type: OpenClaw Skill Name: dockerfile-builder Version: 3.0.0 The script `scripts/script.sh` contains shell injection vulnerabilities due to unquoted variables being passed directly to commands like `grep` and `awk` (e.g., `grep -n 'latest' $2`). Furthermore, the script has broken argument logic where functions incorrectly reference `$2` instead of `$1` after the command shift in the `main` function, rendering the tool largely non-functional. While there is no evidence of intentional malice or data exfiltration, the lack of input sanitization and poor code quality present a security risk.