migrate-kit-to-v3
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [Official Tooling and Dependencies]: The skill instructs on the installation and use of official tools including
docker buildx,sbx, and thekit-tckconformance suite. All referenced sources are official Docker documentation or GitHub repositories, which are recognized as trusted environments. - [Credential and Secret Management]: Security-conscious practices are recommended, such as using the
sbx secret setcommand for handling credentials and carefully auditing.dockerignorefiles to ensure sensitive local data is not included in kit builds. - [Command Execution Context]: The skill facilitates the building and running of Docker containers as part of the migration workflow. These operations are necessary for the skill's primary function and are performed using standard container management workflows.
- [Permissions and Environment Hardening]: The analysis includes detailed guidance on setting correct file ownership (e.g., verifying UID 1000 for the agent user) and defining granular network policies. This focus on least privilege and environment validation supports the creation of secure sandbox environments.
Audit Metadata