docker-build
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for Docker image management and build workflows. No malicious behavior, hidden obfuscation, or unauthorized data exfiltration patterns were identified.
- [COMMAND_EXECUTION]: Documents standard usage of the Docker CLI. The skill includes explicit security warnings regarding destructive commands like
docker system pruneand advises users on safe practices for production environments. - [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting local configuration files (e.g.,
.env.build) and remote Git repositories. It mitigates potential risks by providing clear instructions on using.dockerignoreto limit context and recommending BuildKit secrets for sensitive data handling instead of insecure build arguments.
Audit Metadata