trailofbits/skills/plugins/devcontainer-setup

Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project, setting up isolated development environments, or configuring sandboxed Claude Code workspaces.

Content hash

sha256:142b068ca8d587aaab61226115505e36946aeba671b79b597987b251f91d30cb

Files

10

Quality

100/100

Security findings

• highDisables agent safety promptsSL602 · skills/devcontainer-setup/resources/.zshrc:35
  alias claude-yolo='claude --dangerously-skip-permissions'

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation.

• highPipes a download into a shellSL301 · skills/devcontainer-setup/resources/Dockerfile:76
  RUN curl -fsSL https://claude.ai/install.sh | bash && \

  Remote code is executed without being reviewed or pinned. Whoever controls that URL controls your machine. Fix: Download to a file, verify a checksum, then run it. Or vendor the script into the skill.

• highPipes a download into a shellSL301 · skills/devcontainer-setup/resources/Dockerfile:93
  RUN curl -fsSL https://fnm.vercel.app/install | bash -s -- --install-dir "$FNM_DIR" --skip-shell --release "v${FNM_VERSION}" && \

  Remote code is executed without being reviewed or pinned. Whoever controls that URL controls your machine. Fix: Download to a file, verify a checksum, then run it. Or vendor the script into the skill.

• highDisables agent safety promptsSL602 · skills/devcontainer-setup/resources/post_install.py:6
  - Claude settings (bypassPermissions mode)

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation.

• highDisables agent safety promptsSL602 · skills/devcontainer-setup/resources/post_install.py:94
  """Configure Claude Code with bypassPermissions enabled."""

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation.

• highDisables agent safety promptsSL602 · skills/devcontainer-setup/resources/post_install.py:109
  settings["permissions"]["defaultMode"] = "bypassPermissions"

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation.

• mediumPipes a download into a shellSL301 · skills/devcontainer-setup/references/dockerfile-best-practices.md:54
  RUN set -o pipefail && curl -fsSL https://example.com/install.sh | bash

  Remote code is executed without being reviewed or pinned. Whoever controls that URL controls your machine. Fix: Download to a file, verify a checksum, then run it. Or vendor the script into the skill. Severity lowered: the line reads as documentation, not an instruction.

• mediumDynamic code evaluationSL303 · skills/devcontainer-setup/resources/.zshrc:10
  eval "$(fnm env --use-on-cd)"

  The skill builds code at runtime, which hides what actually runs. Fix: Ship the real code as a file in the skill so it can be reviewed and hashed.

• mediumDynamic code evaluationSL303 · skills/devcontainer-setup/resources/.zshrc:56
  eval "$(fzf --zsh)"

  The skill builds code at runtime, which hides what actually runs. Fix: Ship the real code as a file in the skill so it can be reviewed and hashed.

• mediumDynamic code evaluationSL303 · skills/devcontainer-setup/resources/Dockerfile:95
  eval "$(fnm env)" && \

  The skill builds code at runtime, which hides what actually runs. Fix: Ship the real code as a file in the skill so it can be reviewed and hashed.

• mediumDisables agent safety promptsSL602 · skills/devcontainer-setup/resources/post_install.py:106
  # Set bypassPermissions mode

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation. Severity lowered: the line reads as documentation, not an instruction.

• infoRuns with elevated privilegesSL305 · skills/devcontainer-setup/resources/post_install.py:176
  # Use sudo to fix ownership if needed

  The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command. Severity lowered: the line reads as documentation, not an instruction.