docker-compose

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of common CLI tools such as docker compose, kompose, and kubectl to manage containerized applications.
  • [SAFE]: The documentation includes examples of mounting sensitive host paths (e.g., /var/run/docker.sock, /proc, /sys) and using privileged: true for specific containers (e.g., cAdvisor). These configurations are clearly documented as standard requirements for infrastructure monitoring tools and do not represent a security risk within this context.
  • [CREDENTIALS_UNSAFE]: Example configuration files (e.g., .env) contain placeholder credentials such as rootpass123. The skill includes explicit warnings against committing real secrets to version control and provides guidance on using secure alternatives like Docker Secrets for production environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:12 AM
Security Audit — agent-trust-hub — docker-compose