docker-buildx

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and command-line examples for Docker Buildx and BuildKit. No malicious patterns were detected.
  • [COMMAND_EXECUTION]: Provides standard Docker CLI commands for building and managing images, such as docker buildx build and docker build.
  • [EXTERNAL_DOWNLOADS]: References official and well-known Docker GitHub Actions (e.g., docker/setup-buildx-action) and community-standard container images (e.g., tonistiigi/binfmt) for setting up build environments.
  • [DATA_EXFILTRATION]: Demonstrates usage of BuildKit secret mounts and SSH forwarding (e.g., using --secret with $HOME/.npmrc). These are presented as best practices for secure secret handling during the build process, preventing sensitive data from leaking into image layers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:12 AM
Security Audit — agent-trust-hub — docker-buildx