container-hadolint

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to download the Hadolint binary from its official GitHub releases page for installation on Linux and macOS.
  • Evidence: wget -O /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64 found in SKILL.md and assets/github-actions.yml.
  • [COMMAND_EXECUTION]: Various shell commands are used for installation, configuring git hooks, and executing the linter. This includes standard package manager operations and system utilities like find and chmod.
  • Evidence: chmod +x /usr/local/bin/hadolint and hadolint Dockerfile commands in SKILL.md.
  • [NO_CODE]: The documentation references a scripts/ directory containing Python and Shell scripts (e.g., hadolint_scan.py, hadolint_multistage.py, install_precommit.sh) that are not present in the provided skill files.
  • Evidence: The 'Bundled Resources' section in SKILL.md lists these scripts as part of the skill, but they were not included in the source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 11:00 AM
Security Audit — agent-trust-hub — container-hadolint