react-dockerfile
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied configuration (such as build tools, Node.js versions, and environment variable names) to generate executable Dockerfiles and configuration scripts.
- Ingestion points: User-provided project metadata and environment variables described in SKILL.md.
- Boundary markers: The skill uses standard templates but lacks specific delimiters to isolate user-provided strings within the generated configuration files.
- Capability inventory: Generation of executable Dockerfiles, nginx.conf files, and entrypoint shell scripts that incorporate user-influenced content.
- Sanitization: Relies on standard Docker ARG/ENV mechanisms and envsubst for runtime injection, which may be vulnerable to malformed inputs.
- [EXTERNAL_DOWNLOADS]: The documentation suggests the use of the third-party Docker image fholzer/nginx-brotli:latest for users requiring Brotli compression support. This introduces a dependency on a community resource outside of the official Nginx or platform-trusted registries.
- [SAFE]: The skill proactively implements security best practices by providing a non-root execution pattern (USER nginx) and an Nginx configuration with robust security headers (X-Frame-Options, X-Content-Type-Options, X-XSS-Protection). It also includes a .dockerignore template that explicitly excludes sensitive .env and .git directories from the build context.
Audit Metadata