docker

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads installation scripts and binaries from verified official domains including get.docker.com and GitHub repositories associated with the Docker organization.\n- [COMMAND_EXECUTION]: Contains reference material for system-level administrative tasks, including service control, firewall management, and elevated container permissions.\n- [REMOTE_CODE_EXECUTION]: Documents the standard procedure for installing the software via official remote scripts fetched from well-known domains and executed with shell interpreters.\n- [INDIRECT_PROMPT_INJECTION]: Describes features for variable interpolation and environment variable resolution where external data is substituted into configuration files.\n
  • Ingestion points: references/compose-file/interpolation.md and samples/compose-variable-interpolation.md.\n
  • Boundary markers: No delimiters or safety instructions regarding untrusted environment data are present in the syntax documentation.\n
  • Capability inventory: scripts/cli-cheatsheet.md (execution via docker exec), scripts/cleanup-prune.md (system resource deletion), and scripts/install-engine.md (fetching and running scripts).\n
  • Sanitization: Sanitization is not described in the documentation for these features.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 12:03 AM