configure-server-compose
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes untrusted data from existing repositories and Docker Compose files to generate new configurations.
- Ingestion points: The agent is instructed to perform 'repository analysis' and inspect existing 'compose service names, networks, volumes, and environment names' from the user's codebase.
- Boundary markers: The skill does not explicitly define markers to delimit external repository data from its own instructions, though it emphasizes that generated models must be rendered for validation.
- Capability inventory: The skill uses the
docker compose configcommand to validate generated YAML. It does not perform network operations or write files without explicit user approval. - Sanitization: There is no explicit sanitization logic for data extracted from existing repository files; however, the skill's primary function is generating structured YAML configuration according to strict security rules, which naturally limits the impact of malicious content in the source files.
Audit Metadata