docker
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and templates for Docker containerization of .NET applications, explicitly recommending security best practices such as multi-stage builds and the use of non-root users.
- [COMMAND_EXECUTION]: Provides standard Dockerfile instructions (
RUN dotnet restore,RUN dotnet publish) and shell loops for project file organization. These are standard patterns for building .NET applications and do not involve untrusted inputs. - [EXTERNAL_DOWNLOADS]: References official Microsoft container images from
mcr.microsoft.com. These are downloads from a well-known, trusted technology service. - [CREDENTIALS_UNSAFE]: Includes placeholder credentials (
Password=postgres) in a Docker Compose template for local development. The skill's Decision Guide explicitly advises using environment variables or mounted secrets for real production credentials.
Audit Metadata