docker-compose
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of common CLI tools such as
docker compose,kompose, andkubectlto manage containerized applications. - [SAFE]: The documentation includes examples of mounting sensitive host paths (e.g.,
/var/run/docker.sock,/proc,/sys) and usingprivileged: truefor specific containers (e.g., cAdvisor). These configurations are clearly documented as standard requirements for infrastructure monitoring tools and do not represent a security risk within this context. - [CREDENTIALS_UNSAFE]: Example configuration files (e.g.,
.env) contain placeholder credentials such asrootpass123. The skill includes explicit warnings against committing real secrets to version control and provides guidance on using secure alternatives like Docker Secrets for production environments.
Audit Metadata