docker-to-sealos

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill implements automated template generation using Python scripts that execute local CLI tools such as crane and kompose. These operations are part of the core functionality for image resolution and workload conversion and are implemented using secure subprocess execution patterns (list arguments without shell=True).
  • [DATA_EXPOSURE]: No evidence of hardcoded credentials or access to sensitive system files was found. The environment variables and secrets mentioned in the mapping guides are provided as placeholders and examples for template generation.
  • [REMOTE_CODE_EXECUTION]: The skill performs validation and conversion using local scripts. It does not download and execute arbitrary code from the internet.
  • [SAFE]: The skill uses yaml.safe_load for parsing all configuration files, protecting against unsafe YAML deserialization attacks.
  • [SAFE]: No prompt injection markers, obfuscation techniques, or exfiltration patterns were identified across the 33 files analyzed.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 04:44 PM