Categories
Recipes
Agents

Search PluginboardSearch 1,129 listings⌘K

Loading listing…

About

Ratings and reviews

Information

Plug in what your agents are missing.

Browse

Plugins Skills Agents Recipes Categories

By agent

Claude Code plugins Claude Code skills Cursor MCP servers Codex skills ChatGPT apps Gemini CLI extensions

Makers

Submit a listing Claim a listing Dashboard Pricing

© 2026 Pluginboard. All rights reserved.

Not affiliated with Anthropic, OpenAI, Google, xAI or Meta. Product names and logos belong to their owners.

llms.txt Sitemap

Recipes
Agents

Categories
Recipes
Agents

Loading the security report…

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

Browse plugins, skills and use-case recipes by category.

Build Developer tools Cloud & DevOps Databases AI & agents Web & browser Security

Work Productivity Project management Communication Customer support Sales Marketing & SEO Finance HR & recruiting Legal & compliance E-commerce Automation

Create Design Writing Media Data & analytics Research

Life Education Health & fitness Travel & maps Home & lifestyle Crypto & Web3

Skills Cloud & DevOps docker-build-strategiesSecurity

Db

docker-build-strategies

Security scan passed

SkillSkillsCloud & DevOps Scan passed

Overview Reviews Security

Security of docker-build-strategies

What we checked

What a skill can do

A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

When a server changes its tools

Nothing new reaches your agent until a person has looked at it.

1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.

Scanned on every change, and again when our rules improve.

Something looks wrong?

Tell us and a person on the trust team will look at it. Or email [email protected].

Passed

Safe to install in every agent it supports. Runs in your agent, as instructions.

Download report (JSON)

Last scan: 10 h ago
Version scanned: 3189252
What we read: SKILL.md
Tool changes: —

What we checked

We read the SKILL.md your agent loads, and the listing for 3189252. 6 checks, no findings.

Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed

3 notes that don’t affect the result

NoteRefers to SSH keys or cloud credentialsSA-001

Mentions files that hold private keys or cloud tokens. SKILL.md, line 58

…**Do NOT** `COPY` credential files into the build context: `.npmrc`, `.pypirc`, `.netrc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentia…

NoteRefers to SSH keys or cloud credentialsSA-001

Mentions files that hold private keys or cloud tokens. SKILL.md, line 58

…`COPY` credential files into the build context: `.npmrc`, `.pypirc`, `.netrc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentials (`~/.aw…

NoteRefers to SSH keys or cloud credentialsSA-001

Mentions files that hold private keys or cloud tokens. SKILL.md, line 58

…trc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentials (`~/.aws/credentials`, `~/.config/gcloud/`, service-account JSON files, `~/.azure/`), secr…

What a skill can do

A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.

History

Every scan of this listing, newest first.

Oct 25, 2026 · First scanVersion 3189252 · no findings
Passed

Every rescan is logged, even when nothing changed.

Overview Reviews Security