docker-compose
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running standard Docker Compose commands such as
docker compose config,docker pull, anddocker compose upto validate and run project stacks. - [EXTERNAL_DOWNLOADS]: The skill references official Docker documentation (
docs.docker.com) and the Compose Specification (compose-spec.github.io), which are well-known and trusted technology sources. - [EXTERNAL_DOWNLOADS]: The instructions involve fetching images from official container registries (e.g., Docker Hub, GitHub Container Registry) using
docker pull, which is a standard part of the Docker workflow. - [SAFE]: The skill actively promotes security best practices, including pinning image tags to specific versions, using Docker secrets instead of environment variables for sensitive data, and binding service ports to
127.0.0.1to prevent unintended public exposure. - [SAFE]: The provided templates include a hardened production configuration (
templates/compose.prod.yaml) that demonstrates the use ofread_onlyfile systems, dropping capabilities (cap_drop), and running as a non-root user.
Audit Metadata