depot-container-builds
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference guide for the
depotCLI tool. It includes instructions for building, pushing, and pulling container images using remote builders. - [DATA_EXPOSURE_AND_EXFILTRATION]: The documentation mentions standard security parameters such as
--tokenand--secret. These are documented as command-line flags for user-provided values and do not contain hardcoded credentials or unauthorized data exfiltration logic. - [COMMAND_EXECUTION]: The skill lists various shell commands (e.g.,
depot build,depot bake,docker login). These are standard operational commands for the described tool and do not include suspicious or obfuscated execution patterns. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing configuration files like
Dockerfileordocker-compose.yml, it provides a standard interface for developer tools. There are no patterns suggesting the circumvention of safety guidelines through these inputs.
Audit Metadata