docker-to-sealos
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill implements automated template generation using Python scripts that execute local CLI tools such as
craneandkompose. These operations are part of the core functionality for image resolution and workload conversion and are implemented using secure subprocess execution patterns (list arguments without shell=True). - [DATA_EXPOSURE]: No evidence of hardcoded credentials or access to sensitive system files was found. The environment variables and secrets mentioned in the mapping guides are provided as placeholders and examples for template generation.
- [REMOTE_CODE_EXECUTION]: The skill performs validation and conversion using local scripts. It does not download and execute arbitrary code from the internet.
- [SAFE]: The skill uses
yaml.safe_loadfor parsing all configuration files, protecting against unsafe YAML deserialization attacks. - [SAFE]: No prompt injection markers, obfuscation techniques, or exfiltration patterns were identified across the 33 files analyzed.
Audit Metadata