container-registries
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Harbor container registry installer from its official repository on GitHub for self-hosted deployments.
- [REMOTE_CODE_EXECUTION]: Describes downloading and executing an installation script (
install.sh) for Harbor. This is a standard and expected procedure for deploying this well-known, graduated CNCF project. - [COMMAND_EXECUTION]: Provides extensive CLI examples using Docker and cloud provider tools (AWS, Azure, GCloud) to perform registry operations like authentication, image tagging, and policy management.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes external inputs like registry URLs, repository names, and image tags provided in SKILL.md.
- Boundary markers: None explicitly defined in the instruction templates.
- Capability inventory: Includes subprocess execution of Docker and cloud CLIs, network operations (push/pull), and file system modification via the Harbor installer.
- Sanitization: Standard CLI parameter handling is assumed; no manual sanitization logic is provided.
Audit Metadata