docker-pro
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends base images from Chainguard (
cgr.dev) and Docker Hardened Images (dhi.io). Both are well-known services specializing in secure, minimal container images designed to reduce attack surfaces. - [COMMAND_EXECUTION]: The instructions suggest using utility commands like
regctlanddocker buildx imagetools inspectto resolve image digests. These are standard developer tools for interacting with container registries. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inspect the repository's source code, lockfiles, and existing configurations to tailor its Dockerfile and Compose generation. This ingestion of local data is a functional requirement for providing project-specific modernizations.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes security by instructing the agent to create
.dockerignorefiles that explicitly exclude sensitive local data such as.envfiles, SSH keys, and.githistory from being included in Docker build contexts.
Audit Metadata