docker-expert
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data from the project's local environment, such as
Dockerfileanddocker-compose.ymlfiles. This creates a surface for indirect prompt injection where instructions embedded in project files could attempt to influence the agent's behavior. - Ingestion points: Reads project-specific Docker configurations and container architecture (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing local files.
- Capability inventory: The skill leverages host capabilities to read and modify project files to implement optimizations (SKILL.md).
- Sanitization: No specific validation or sanitization routines for project file content are defined.
Audit Metadata