docker-php
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill provides security-focused instructions for containerizing PHP applications, specifically recommending multi-stage builds to minimize image size and attack surface, and the use of non-root users to enhance runtime security.
- [EXTERNAL_DOWNLOADS]: The skill references the use of official Docker images and the Composer package manager, which are standard components and well-known services within the development ecosystem.
- [REMOTE_CODE_EXECUTION]: The documentation includes an educational example of an anti-pattern (using curl | php to install a script) that is explicitly documented for the user to avoid in production images.
Audit Metadata