developing-dockerfile
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECREDENTIALS_UNSAFEREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of comprehensive documentation and templates designed to enhance the security of containerized applications by providing clear, safe implementation patterns.
- [CREDENTIALS_UNSAFE]: The instructions proactively mitigate credential exposure by forbidding the use of ARG, ENV, LABEL, or COPY for secrets, recommending secure alternatives like BuildKit secret mounts and .dockerignore exclusions.
- [REMOTE_CODE_EXECUTION]: The skill identifies and warns against dangerous supply chain patterns, such as piping remote content directly into a shell, and advises on artifact integrity verification.
- [PRIVILEGE_ESCALATION]: The guidelines implement the principle of least privilege by providing concrete templates for creating and using non-root users in both Debian/Ubuntu and Alpine environments.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests potentially untrusted user project information and code, it utilizes its own security guidelines as a sanitization framework to ensure generated configurations avoid unsafe operations or privilege escalation.
Audit Metadata