image-management
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains numerous shell commands for Docker lifecycle management, such as
docker build,docker push, anddocker login. - [PRIVILEGE_ESCALATION]: The instructions for image analysis and vulnerability scanning include mounting the Docker socket (
/var/run/docker.sock), which grants the tool containers control over the host's Docker daemon. - [EXTERNAL_DOWNLOADS]: Fetches diagnostic and security tools from public registries, such as
wagoodman/diveandaquasec/trivyfor image inspection and vulnerability assessment. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for shell commands and Dockerfiles that ingest external data such as image names, build arguments, and source code. * Ingestion points: Command-line arguments for Docker commands and file content for
docker build. * Boundary markers: None identified. * Capability inventory: Execution of shell commands, network access via Docker pull/push, and file system writes viadocker save. * Sanitization: None identified.
Audit Metadata