docker-compose
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes how to use docker compose commands to manage containers, which is the primary purpose of the skill. Evidence: Multiple examples in SKILL.md such as 'docker compose up -d', 'docker compose exec', and 'docker compose run'.
- [PRIVILEGE_ESCALATION]: The documentation includes a pattern for mounting the Docker socket, which is a powerful configuration. Evidence: 'volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro' in the Traefik example in SKILL.md. This allows the container to interact with the host's Docker daemon.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing external configuration files, creating a potential injection surface.
- Ingestion points: The agent reads and interprets docker-compose.yml and .env files as described in SKILL.md.
- Boundary markers: None are explicitly defined in the provided documentation to delimit user-provided configuration from agent instructions.
- Capability inventory: The skill enables host-level container management via the docker compose CLI.
- Sanitization: The documentation recommends using .env files for secrets but does not specify validation steps for the YAML content itself.
Audit Metadata