skills/badhope/skill/docker/Gen Agent Trust Hub

docker

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard templates and best practices for Docker environments, including optimized configurations for Node.js, Python, and Go applications.
  • [SAFE]: Dockerfiles utilize multi-stage builds and implement non-root users (e.g., nodejs, appuser) to minimize the attack surface and enhance container security.
  • [SAFE]: Hardcoded credentials in Docker Compose files (e.g., 'user:password', 'dev:dev') are generic default placeholders used for template demonstration purposes and do not represent leaked production secrets.
  • [SAFE]: Package installations (npm, pip, go mod, apk) target official registries and well-known repositories, which is standard behavior for building application images.
  • [SAFE]: The management bash script provides routine helper functions for local environment orchestration, such as building images and performing database backups, with no signs of malicious intent or command injection vulnerabilities.
  • [SAFE]: Network operations within health checks are directed at localhost to verify service availability, following standard container orchestration patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 06:59 AM