multi-stage-dockerfile

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference for creating optimized Dockerfiles and does not contain any executable scripts or commands that run on the host system.
  • [SAFE]: Dockerfile templates provided follow industry security best practices, including the use of non-root users (via USER instruction), minimal runtime images (Distroless, Alpine, and Slim variants), and proper multi-stage build isolation.
  • [SAFE]: Health check commands (using curl, wget, or Python's urllib) are correctly scoped to localhost within the container context for monitoring service availability.
  • [SAFE]: No evidence of prompt injection, obfuscation, data exfiltration, or persistence mechanisms was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 03:14 AM