containerfile-creator
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established security guidelines for containerization, such as OpenShift/Kubernetes compatibility and the principle of least privilege.
- [COMMAND_EXECUTION]: Automated detectors flagged potentially destructive commands (e.g.,
rm -rf). Upon review, these are benign operations intended for cleaning build caches (e.g.,rm -rf /root/.cache/pip) or hardening the final image by removing unnecessary binaries like shell environments. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of tools from reputable sources like Yelp (dumb-init) and Astral (uv). These patterns are safe as they implement strict SHA256 checksum verification and target well-known organizations.
- [CREDENTIALS_SAFE]: The skill correctly uses ARGs and ENVs for configuration and does not include any hardcoded credentials, API keys, or secrets.
Audit Metadata