migrate-kit-to-v3

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [Official Tooling and Dependencies]: The skill instructs on the installation and use of official tools including docker buildx, sbx, and the kit-tck conformance suite. All referenced sources are official Docker documentation or GitHub repositories, which are recognized as trusted environments.
  • [Credential and Secret Management]: Security-conscious practices are recommended, such as using the sbx secret set command for handling credentials and carefully auditing .dockerignore files to ensure sensitive local data is not included in kit builds.
  • [Command Execution Context]: The skill facilitates the building and running of Docker containers as part of the migration workflow. These operations are necessary for the skill's primary function and are performed using standard container management workflows.
  • [Permissions and Environment Hardening]: The analysis includes detailed guidance on setting correct file ownership (e.g., verifying UID 1000 for the agent user) and defining granular network policies. This focus on least privilege and environment validation supports the creation of secure sandbox environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 08:02 PM