docker-conventions
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill's instructions, examples, or referenced files. The content is educational and aligns with industry security standards for containerization.
- [EXTERNAL_DOWNLOADS]: Skill examples include references to official container images and security tools from well-known and trusted organizations, such as Microsoft (
mcr.microsoft.com), Google (gcr.io), and Aqua Security. - [COMMAND_EXECUTION]: The provided instructions and templates use standard, secure patterns for package management (
apt-get,apk), application builds (npm,dotnet,go), and vulnerability scanning (trivy,hadolint). - [CREDENTIALS_UNSAFE]: The skill explicitly promotes secure secrets management, advising against baking secrets into images and recommending the use of
.dockerignorefiles and runtime secret injection.
Audit Metadata