container-security
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloads for established DevOps tools such as K9s, ArgoCD, yq, and Kustomize from their official GitHub repositories. It also provides workflows for importing the Trivy security scanner from Aqua Security's Docker Hub repository into private Azure Container Registries. These downloads are documented neutrally and include best practices like version pinning and download verification.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for the agent to ingest and analyze JSON output from Trivy vulnerability scans. This ingestion surface is used to categorize CVE findings and suggest manual remediation steps (such as updating base images or pinning versions). There are no patterns of automated execution or unsafe interpolation of the scan data into sensitive commands.
- [COMMAND_EXECUTION]: Instructions include standard Azure CLI (
az acr) and Docker commands for image building, registry management, and container hardening. These include legitimate operations such as configuring SSH for key-based authentication, creating non-root users, and managing registry imports.
Audit Metadata