docker-expert
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code examples that strictly adhere to security best practices for containerization.
- [SAFE]: The provided Dockerfile examples correctly implement privilege separation by creating and switching to a non-root user (
appuser) and utilizing multi-stage builds to minimize the production image size and attack surface. - [SAFE]: The Docker Compose template appropriately recommends the use of Docker Secrets for sensitive information rather than plain-text environment variables.
- [SAFE]: The
.dockerignoreasset is comprehensive and follows standard practices to prevent sensitive files like.envor build artifacts from being included in the Docker build context.
Audit Metadata