docker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes GitHub Actions workflows that utilize official actions from the 'actions' and 'docker' organizations to build and push images. These are standard, well-known services used for CI/CD processes.
- [COMMAND_EXECUTION]: The skill provides documentation for standard Docker and Docker Compose CLI commands (e.g., build, run, up, down) intended for development and deployment management.
- [CREDENTIALS_UNSAFE]: The docker-compose templates contain placeholder credentials (e.g., 'POSTGRES_PASSWORD=postgres', 'user:password'). These are clearly documented as example values for development environments and the skill explicitly recommends setting proper environment variables in its best practices section.
- [INDIRECT_PROMPT_INJECTION]: As a documentation and template-based skill, it presents a minimal attack surface. The provided snippets for Dockerfiles and Compose files serve as static reference material for the agent.
Audit Metadata