skills/bretfisher/skills/docker-pro/Gen Agent Trust Hub

docker-pro

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends base images from Chainguard (cgr.dev) and Docker Hardened Images (dhi.io). Both are well-known services specializing in secure, minimal container images designed to reduce attack surfaces.
  • [COMMAND_EXECUTION]: The instructions suggest using utility commands like regctl and docker buildx imagetools inspect to resolve image digests. These are standard developer tools for interacting with container registries.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inspect the repository's source code, lockfiles, and existing configurations to tailor its Dockerfile and Compose generation. This ingestion of local data is a functional requirement for providing project-specific modernizations.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes security by instructing the agent to create .dockerignore files that explicitly exclude sensitive local data such as .env files, SSH keys, and .git history from being included in Docker build contexts.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 06:08 PM