docker

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and templates for Docker containerization of .NET applications, explicitly recommending security best practices such as multi-stage builds and the use of non-root users.
  • [COMMAND_EXECUTION]: Provides standard Dockerfile instructions (RUN dotnet restore, RUN dotnet publish) and shell loops for project file organization. These are standard patterns for building .NET applications and do not involve untrusted inputs.
  • [EXTERNAL_DOWNLOADS]: References official Microsoft container images from mcr.microsoft.com. These are downloads from a well-known, trusted technology service.
  • [CREDENTIALS_UNSAFE]: Includes placeholder credentials (Password=postgres) in a Docker Compose template for local development. The skill's Decision Guide explicitly advises using environment variables or mounted secrets for real production credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 03:50 PM
Security Audit — agent-trust-hub — docker