Skills
Navigate
skills/autohandai/community-skills/analyzing-docker-container-forensics/Gen Agent Trust Hub

analyzing-docker-container-forensics

Fail

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/agent.py script contains a command injection vulnerability. The run_cmd function executes shell commands using shell=True, and the container_id input from sys.argv[1] is interpolated into strings for docker inspect, docker diff, docker export, and docker logs without any sanitization. An attacker can execute arbitrary commands by supplying a malicious string as the container ID parameter.\n- [EXTERNAL_DOWNLOADS]: The SKILL.md workflow downloads the dive tool from the wagoodman/dive repository on GitHub.\n- [EXTERNAL_DOWNLOADS]: The skill downloads the container-diff tool from Google's official cloud storage for use in image comparisons.\n- [COMMAND_EXECUTION]: The forensic workflow utilizes sudo dpkg -i for package installation and chmod +x for binary setup, requiring elevated system permissions.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 16, 2026, 08:10 AM
Security Audit — agent-trust-hub — analyzing-docker-container-forensics