managing-container-registries
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions follow standard DevOps best practices for managing container registries like AWS ECR, GCP Artifact Registry, and Azure ACR.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file access, or unauthorized network operations were detected. The authentication methods described (e.g.,
docker-credential-ecr-login,gcloud auth configure-docker) are standard industry practices. - [PROMPT_INJECTION]: The instructions do not contain any attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [REMOTE_CODE_EXECUTION]: While the skill references automation scripts in its documentation (
create_registry.sh,validate_config.py), no external downloads or remote script execution patterns (likecurl | bash) are present in the provided content. - [COMMAND_EXECUTION]: The
allowed-toolscorrectly scope execution todockerandkubectlcommands, which is appropriate for the skill's stated purpose of container management.
Audit Metadata