docker-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing templates and best practices for Docker and Docker Compose.
- [SAFE]: Includes a dedicated section on 'Container Security' that recommends non-root users, dropping capabilities, and using read-only filesystems.
- [SAFE]: Correctly identifies and warns against security anti-patterns such as hardcoding secrets in images or compose files, and using the ':latest' tag.
- [SAFE]: The environment variables provided in the examples (e.g., POSTGRES_PASSWORD: postgres) are standard placeholders for local development environments and are used within a 'Standard Web App Stack' template context.
Audit Metadata