docker-impl-production
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and structural resource for Docker security best practices. It includes comprehensive guidance on implementing non-root user configurations, health checks, and proper signal handling via the exec form of ENTRYPOINT.
- [SAFE]: All external references to base images and tools target well-known and trusted infrastructure, including Google Container Registry (
gcr.io), Microsoft Container Registry (mcr.microsoft.com), and official Docker Hub images for Alpine, Debian, Ubuntu, Node.js, and Python. - [SAFE]: The skill specifically instructs against insecure practices, such as running containers as root, including secrets in image layers, or using the
latesttag in production. No malicious patterns, obfuscation, or unauthorized command execution were detected.
Audit Metadata