docker-dockerfile

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely documentation-based, providing templates, best practices, and optimization strategies for Dockerfile authoring. It contains no executable scripts or system configuration changes.
  • [REMOTE_CODE_EXECUTION]: Automated scans flagged a curl command in SKILL.md. Analysis confirms this is an educational example within a Dockerfile code block illustrating how to optimize image layers. The command uses a placeholder URL (example.com) and is not intended for execution on the host or agent environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user requests for Dockerfile assistance. It lacks an attack surface for indirect prompt injection as it does not perform automated shell execution or tool calls based on processed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 02:39 AM