docker-desktop
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and provided scripts align with standard developer workflows for container management. No signs of obfuscation, exfiltration, or unauthorized command execution were found.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided Docker and Kubernetes configurations, which presents an ingestion surface for untrusted data.\n
- Ingestion points: User-provided configuration files such as
settings.jsonanddocker-compose.yml, as well as outputs fromdockerandkubectlcommands (SKILL.md).\n - Boundary markers: Not defined.\n
- Capability inventory: Includes shell commands for managing containers and local Kubernetes clusters (SKILL.md).\n
- Sanitization: No explicit data sanitization or validation logic is defined within the skill.
Audit Metadata