docker-compose

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of markdown documentation and configuration examples. No executable scripts or binary files are present.
  • [SAFE]: Environment variable examples use clearly identifiable placeholders (e.g., 'secret123', 'rootpass123') for educational purposes and include security best practices, such as adding .env files to .gitignore.
  • [SAFE]: High-privilege configurations, such as mounting the Docker socket or using 'privileged: true' for monitoring tools like cAdvisor, are presented accurately within the context of standard container orchestration workflows.
  • [SAFE]: All external references point to official Docker documentation (docs.docker.com), and the suggested third-party tools (e.g., kompose, bitnami/kafka) are well-known industry standards.
  • [SAFE]: Instructions are focused on teaching proper tool usage and provide remediation for common security pitfalls like exposed secrets or unisolated networks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:25 AM
Security Audit — agent-trust-hub — docker-compose