docker-data-environments

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads binaries and library files from well-known and official sources.
  • Fetches Apache Spark binaries from downloads.apache.org.
  • Downloads Java connectors (Iceberg, AWS SDK) from Maven Central (repo1.maven.org).
  • Retrieves Airflow constraints from the official Apache Airflow GitHub repository.
  • [COMMAND_EXECUTION]: The provided Dockerfile templates execute shell commands to configure the environment.
  • Uses curl and tar to install system binaries.
  • Uses pip and apt-get to manage dependencies within the container images.
  • Implements docker buildx for multi-platform image building.
  • [CREDENTIALS_UNSAFE]: The Docker Compose template includes default credentials for local development.
  • Uses standard defaults like minioadmin/minioadmin and airflow/airflow for local service accessibility.
  • Uses environment variable placeholders (e.g., ${FERNET_KEY}) for sensitive production configurations, which is a recommended practice.
  • [SAFE]: The skill explicitly promotes security hardening practices.
  • Recommends the use of non-root users to limit container privileges.
  • Demonstrates the use of Docker BuildKit secrets to prevent sensitive tokens from being baked into image layers.
  • Encourages minimal base images and read-only filesystems to reduce attack surfaces.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 12:59 PM