scanning-container-security
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze outputs from container security scanners (Trivy, Grype, Snyk, Hadolint) which ingest untrusted data from container images and Dockerfiles.
- Ingestion points: Scan results and vulnerability reports are read and analyzed by the agent as specified in the SKILL.md instructions.
- Boundary markers: The skill lacks explicit delimiters or instructions for the agent to treat external tool outputs as untrusted or to ignore embedded instructions within those outputs.
- Capability inventory: The skill is granted permissions for file operations (Read, Write, Edit) and restricted shell access (docker and kubectl commands) in the SKILL.md frontmatter.
- Sanitization: No validation or sanitization logic is present to filter malicious content that might be embedded in container metadata or Dockerfile comments before the agent processes the findings.
Audit Metadata