docker-compose-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions are strictly focused on Docker Compose design patterns and do not contain any instructions aimed at bypassing AI safety guardrails or overriding system prompts.
- [DATA_EXFILTRATION]: No network operations, sensitive file path access, or credential harvesting patterns were identified. The skill correctly instructs users to avoid committing sensitive defaults for local stacks.
- [CREDENTIALS_UNSAFE]: The provided Docker Compose template uses a placeholder value (
change-me) for a local PostgreSQL environment variable, which is a standard development practice and does not constitute a security risk. The skill workflow specifically includes instructions for secret handling policies to avoid exposing credentials. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. The skill consists entirely of static Markdown and YAML templates.
- [OBFUSCATION]: No encoded strings, zero-width characters, or hidden text patterns were found in any of the analyzed files.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a structural guide for local orchestration and does not ingest untrusted external data or provide a surface for third-party instruction injection.
Audit Metadata