bootstrap-phoenix-docker
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a Node.js setup script from NodeSource, a well-known service for Node.js distribution, during the Docker build process.
- [COMMAND_EXECUTION]: The workflow involves executing standard build and deployment commands such as
mix,docker build, anddocker runto manage the Phoenix application lifecycle. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the use of environment variables (
DATABASE_URL,SECRET_KEY_BASE) for managing sensitive configuration, which is a standard security practice for containerized applications. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific files during the release generation phase, which represents a potential injection surface.
- Ingestion points:
mix phx.gen.releasereads local application files (mix.exs,config/*.exs). - Boundary markers: None explicitly defined in the generated templates.
- Capability inventory: Execution of
mixanddockerCLI tools. - Sanitization: Relies on the default behavior of the Phoenix release generator and standard Elixir tooling.
Audit Metadata