docker-security
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is purely educational and provides legitimate security hardening guidance based on the CIS Docker Benchmark.
- [COMMAND_EXECUTION]: The skill includes command-line examples for running security audits and configuring container security options (e.g., --cap-drop, --read-only, --security-opt). These are standard operations for Docker administrators.
- [EXTERNAL_DOWNLOADS]: The skill references official Docker documentation and tools. It recommends the use of the
docker/docker-bench-securityimage, which is a well-known industry standard for container auditing. These references are documented neutrally and align with best practices. - [DATA_EXPOSURE]: The skill accurately identifies sensitive file paths such as
/var/run/docker.sockand.aws/credentials. It provides necessary warnings about the risks of mounting the Docker socket and demonstrates secure methods for secret injection using BuildKit, preventing accidental exposure.
Audit Metadata