skills/affaan-m/ecc/docker-patterns/Gen Agent Trust Hub

docker-patterns

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides various standard Docker and Docker Compose commands for managing local containerized environments, building images, and performing health checks. These commands are descriptive patterns intended for local development and testing workflows.
  • [CREDENTIALS_UNSAFE]: While the skill contains literal values like 'postgres:postgres' for database connectivity, these are used within documentation patterns for local development stacks. The skill explicitly identifies hardcoding sensitive secrets (like API keys) in images as an anti-pattern and provides correct alternatives using environment variables and .env files.
  • [PRIVILEGE_ESCALATION]: The skill actively promotes security hardening by providing Dockerfile patterns that create and use non-root users ('appuser'), drop kernel capabilities, and enforce read-only filesystems.
  • [REMOTE_CODE_EXECUTION]: The skill references standard container image builds from official registries (e.g., node:22-alpine). It describes a 'Hardened CLI Installer Harness' which is designed to provide a secure sandbox for testing installer scripts, reducing the risk of host system mutation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:54 AM