check-docker-php-config
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains only documentation, configuration templates, and grep search patterns intended for auditing Dockerized PHP applications. No executable scripts, network operations, or sensitive file access patterns are present.
- [SAFE]: The content promotes security best practices by identifying risky configurations like
display_errors = Onormemory_limit = -1and recommending safer alternatives. - [INDIRECT_PROMPT_INJECTION]: While the skill instructions involve processing external files (Dockerfiles, config files), the risk is negligible as it provides static patterns for identification and lacks capabilities to execute or transmit data based on findings. Evidence: Ingestion via file system (SKILL.md), no dangerous tools or sanitization logic present.
Audit Metadata