multi-stage-dockerfile
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for creating optimized Dockerfiles and does not contain any executable scripts or commands that run on the host system.
- [SAFE]: Dockerfile templates provided follow industry security best practices, including the use of non-root users (via
USERinstruction), minimal runtime images (Distroless, Alpine, and Slim variants), and proper multi-stage build isolation. - [SAFE]: Health check commands (using
curl,wget, or Python'surllib) are correctly scoped tolocalhostwithin the container context for monitoring service availability. - [SAFE]: No evidence of prompt injection, obfuscation, data exfiltration, or persistence mechanisms was detected.
Audit Metadata