multi-stage-dockerfile
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and templates for Dockerfile best practices. It explicitly encourages security measures such as using non-root users, minimal base images, and excluding sensitive files via
.dockerignore. - [PRIVILEGE_ESCALATION]: The skill guides the user to implement the principle of least privilege by using the
USERinstruction to run containers as non-root users, which is a standard security hardening technique. - [EXTERNAL_DOWNLOADS]: Dockerfile templates reference official and well-known base images (e.g., from Google's
gcr.ioand official Docker Hub repositories), which is standard practice for container development.
Audit Metadata