docker-dockerfile
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely documentation-based, providing templates, best practices, and optimization strategies for Dockerfile authoring. It contains no executable scripts or system configuration changes.
- [REMOTE_CODE_EXECUTION]: Automated scans flagged a
curlcommand inSKILL.md. Analysis confirms this is an educational example within a Dockerfile code block illustrating how to optimize image layers. The command uses a placeholder URL (example.com) and is not intended for execution on the host or agent environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes user requests for Dockerfile assistance. It lacks an attack surface for indirect prompt injection as it does not perform automated shell execution or tool calls based on processed data.
Audit Metadata