docker
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads installation scripts and binaries from verified official domains including
get.docker.comand GitHub repositories associated with the Docker organization.\n- [COMMAND_EXECUTION]: Contains reference material for system-level administrative tasks, including service control, firewall management, and elevated container permissions.\n- [REMOTE_CODE_EXECUTION]: Documents the standard procedure for installing the software via official remote scripts fetched from well-known domains and executed with shell interpreters.\n- [INDIRECT_PROMPT_INJECTION]: Describes features for variable interpolation and environment variable resolution where external data is substituted into configuration files.\n - Ingestion points:
references/compose-file/interpolation.mdandsamples/compose-variable-interpolation.md.\n - Boundary markers: No delimiters or safety instructions regarding untrusted environment data are present in the syntax documentation.\n
- Capability inventory:
scripts/cli-cheatsheet.md(execution viadocker exec),scripts/cleanup-prune.md(system resource deletion), andscripts/install-engine.md(fetching and running scripts).\n - Sanitization: Sanitization is not described in the documentation for these features.
Audit Metadata