github-docker-action
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a documentation resource for building GitHub Actions. The provided code templates (Dockerfile, action.yml, and entrypoint scripts) follow standard security practices, such as pinning base image versions and providing guidance on handling permissions correctly in Git.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risk of processing untrusted data via GitHub Action inputs and provides mitigation guidance.
- Ingestion points: Workflow inputs defined in
action.yml(e.g.,who-to-greet) which are passed to the containerized environment. - Boundary markers: The skill explicitly warns in
SKILL.mdto "Always treat workflow inputs as untrusted" and to avoid direct interpolation inrun:blocks. - Capability inventory: The templates demonstrate capabilities including filesystem access to the repository workspace, writing to the runner's output files (
$GITHUB_OUTPUT), and setting environment variables ($GITHUB_ENV). - Sanitization: Recommends passing inputs as positional arguments to the entrypoint script to reduce the risk of shell injection compared to direct variable expansion in the workflow YAML.
Audit Metadata