docker-buildx
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and command-line examples for Docker Buildx and BuildKit. No malicious patterns were detected.
- [COMMAND_EXECUTION]: Provides standard Docker CLI commands for building and managing images, such as
docker buildx buildanddocker build. - [EXTERNAL_DOWNLOADS]: References official and well-known Docker GitHub Actions (e.g.,
docker/setup-buildx-action) and community-standard container images (e.g.,tonistiigi/binfmt) for setting up build environments. - [DATA_EXFILTRATION]: Demonstrates usage of BuildKit secret mounts and SSH forwarding (e.g., using
--secretwith$HOME/.npmrc). These are presented as best practices for secure secret handling during the build process, preventing sensitive data from leaking into image layers.
Audit Metadata