container-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains standard security hardening configurations for Dockerfiles, container runtimes, and Kubernetes manifests. It correctly emphasizes best practices such as running as non-root users, using read-only filesystems, and dropping unnecessary capabilities.
- [SAFE]: References to external resources, such as container images from
gcr.io(Google Container Registry), involve well-known and trusted services. - [SAFE]: The tools mentioned (Trivy, Grype, Cosign, Docker Scout) are industry-standard security utilities for image scanning and signing.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for configuration files. While these could serve as a surface for indirect prompt injection if an agent were to interpolate untrusted user data into them without sanitization, the skill itself does not facilitate or encourage this behavior and provides safe baseline configurations.
Audit Metadata