dockerfile-generator

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill functions by processing user-provided requirements to generate Dockerfiles, which creates a potential surface for indirect prompt injection.
  • Ingestion points: The skill triggers on and processes user requests regarding "dockerfile generator" patterns and devops tasks as defined in SKILL.md.
  • Boundary markers: Absent. The instructions do not define delimiters or provide specific directives to ignore instructions that might be embedded within user-supplied content.
  • Capability inventory: The skill has access to powerful capabilities including Bash(cmd:*), Write, Edit, and Read as specified in the allowed-tools of SKILL.md.
  • Sanitization: Absent. The skill lacks explicit instructions for sanitizing, validating, or escaping external input before it is used to generate configurations or used within shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:47 AM