docker-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural patterns and templates for Docker development without any malicious instructions or obfuscated code.
- [SAFE]: Promotes security best practices by including instructions for multi-stage builds, non-root user execution (
USER appuser), and dropping kernel capabilities (cap_drop: ALL). - [SAFE]: Includes a dedicated section on secret management that explicitly warns against hardcoding credentials in Dockerfiles or Compose files, recommending the use of
.envfiles and Docker secrets instead. - [SAFE]: All external resource references (e.g.,
node:22-alpine,postgres:16-alpine) target official and well-known images from trusted registries. - [SAFE]: The use of default credentials like
postgres:postgresis limited to local development templates and is clearly documented as a placeholder for educational purposes.
Audit Metadata