docker-to-sealos
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Docker Compose YAML files and installation documentation, which constitutes an attack surface for indirect prompt injection. It mitigates this risk through strict structural validation and mandatory redaction of secret values and connection strings in generated artifacts. Ingestion points occur in scripts/compose_to_template.py.
- [EXTERNAL_DOWNLOADS]: Fetches application icon assets from the SVGL API, a well-known service for open-source logos. Evidence is found in scripts/compose_to_template.py, which uses urllib.request.urlopen to access https://api.svgl.app based on inferred application metadata.
- [COMMAND_EXECUTION]: Employs standard container orchestration utilities, specifically crane and kompose, to assist in configuration conversion and image tag resolution. Evidence is found in scripts/compose_to_template.py and scripts/quality_gate.py, which use subprocess.run with fixed, non-shell command lists to execute these local binaries.
Audit Metadata