docker-model-runner
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [Remote Script Execution]: The installation guide references a command to download and execute a script from get.docker.com. This is a common method for installing the Docker engine and uses the official vendor repository.\n- [Privilege Escalation Commands]: The documentation includes instructions for using sudo to install packages and manage user permissions. These administrative tasks are expected for system-level software installation.\n- [Local Network Communication]: The skill interacts with an API hosted on localhost. This is part of the intended functionality for local inference and allows for communication with the model runner without external data transfer.\n- [Package Dependencies]: The skill suggests using standard libraries such as openai for Python and Node.js to interface with the local API. These are widely recognized and standard tools for this purpose.
Audit Metadata