dockerfile
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains instructional examples for the Docker
ADDcommand using a documentation placeholder URL (https://example.com/file.tar.gz). This is a standard illustrative pattern for teaching Docker features and does not represent an actual remote code execution threat. - [SAFE]: The content follows industry-standard security guidelines for containerization. It explicitly instructs users to create non-privileged users (
USER appuser), utilize official and minimal base images (alpine,slim), and use.dockerignoreto prevent sensitive files like.envor credentials from being accidentally included in image layers.
Audit Metadata