docker-impl-build-optimization

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill content is purely instructional and educational, providing guidance on Dockerfile optimization, layer caching, and build performance.
  • [SAFE]: External links point exclusively to official Docker documentation (docs.docker.com), which are trusted and well-known service domains.
  • [SAFE]: The skill explicitly warns against security anti-patterns, such as leaking secrets via ARG or ENV instructions, and recommends the use of BuildKit's --mount=type=secret for secure credential handling.
  • [SAFE]: The provided .dockerignore templates follow security best practices by excluding sensitive files like environment variables (.env), private keys (.key, .pem), and certificates (.cert) from the build context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 02:02 AM
Security Audit — agent-trust-hub — docker-impl-build-optimization