docker-patterns

Pass

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains architectural patterns and templates for Docker development without any malicious instructions or obfuscated code.
  • [SAFE]: Promotes security best practices by including instructions for multi-stage builds, non-root user execution (USER appuser), and dropping kernel capabilities (cap_drop: ALL).
  • [SAFE]: Includes a dedicated section on secret management that explicitly warns against hardcoding credentials in Dockerfiles or Compose files, recommending the use of .env files and Docker secrets instead.
  • [SAFE]: All external resource references (e.g., node:22-alpine, postgres:16-alpine) target official and well-known images from trusted registries.
  • [SAFE]: The use of default credentials like postgres:postgres is limited to local development templates and is clearly documented as a placeholder for educational purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 4, 2026, 07:07 PM