axiom-docker-logging
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous commands for the AI to execute on the host system, including
docker plugin install,docker plugin set, anddocker run. - These commands are standard for managing Docker plugins and containers.
- The instructions emphasize least privilege and secret management, specifically warning against dumping environment variables that contain tokens or printing variables to the screen.
- [CREDENTIALS_SAFE]: The skill correctly handles sensitive data.
- It instructs the user/agent to use environment variables (
AXIOM_TOKEN) instead of hardcoding values. - It explicitly mandates turning off shell tracing (
set -x) and avoiding token literals in shell history or Compose files. - [EXTERNAL_DOWNLOADS]: The skill downloads the
axiom-docker-loggerplugin from Docker Hub or GHCR. - The plugin references (
ashutoshpw/axiom-docker-logger) match the skill author's verified namespace. - The instructions prioritize Docker Hub and require explicit user request for alternative registries.
Audit Metadata