container-hadolint
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download the Hadolint binary from its official GitHub releases page for installation on Linux and macOS.
- Evidence:
wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64found inSKILL.mdandassets/github-actions.yml. - [COMMAND_EXECUTION]: Various shell commands are used for installation, configuring git hooks, and executing the linter. This includes standard package manager operations and system utilities like
findandchmod. - Evidence:
chmod +x /usr/local/bin/hadolintandhadolint Dockerfilecommands inSKILL.md. - [NO_CODE]: The documentation references a
scripts/directory containing Python and Shell scripts (e.g.,hadolint_scan.py,hadolint_multistage.py,install_precommit.sh) that are not present in the provided skill files. - Evidence: The 'Bundled Resources' section in
SKILL.mdlists these scripts as part of the skill, but they were not included in the source files.
Audit Metadata