configure-container-scan
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. The skill's behavior is consistent with its stated purpose of pipeline configuration.
- [COMMAND_EXECUTION]: The skill utilizes the
harness_getandharness_updatetools through theharness-mcp-v2server to read and modify pipeline YAML. These actions are within the expected operational scope for a pipeline management skill. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential handling by explicitly instructing the user to provide secret references (e.g.,
<+secrets.getValue("...")>) for scanner authentication tokens and registry credentials, rather than accepting or storing plaintext secrets.
Audit Metadata