skills/avbel/ai-skills/docker-compose/Gen Agent Trust Hub

docker-compose

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for running standard Docker Compose commands such as docker compose config, docker pull, and docker compose up to validate and run project stacks.
  • [EXTERNAL_DOWNLOADS]: The skill references official Docker documentation (docs.docker.com) and the Compose Specification (compose-spec.github.io), which are well-known and trusted technology sources.
  • [EXTERNAL_DOWNLOADS]: The instructions involve fetching images from official container registries (e.g., Docker Hub, GitHub Container Registry) using docker pull, which is a standard part of the Docker workflow.
  • [SAFE]: The skill actively promotes security best practices, including pinning image tags to specific versions, using Docker secrets instead of environment variables for sensitive data, and binding service ports to 127.0.0.1 to prevent unintended public exposure.
  • [SAFE]: The provided templates include a hardened production configuration (templates/compose.prod.yaml) that demonstrates the use of read_only file systems, dropping capabilities (cap_drop), and running as a non-root user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:07 AM