aif-dockerize

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the project codebase and specific context files to guide the generation of Docker configurations and shell scripts.
  • Ingestion points: The skill reads .ai-factory/DESCRIPTION.md, .ai-factory/skill-context/aif-dockerize/SKILL.md, and scans project source files using Glob and Grep to determine the tech stack.
  • Boundary markers: Project-specific context files are treated as mandatory overrides; no specific boundary delimiters are used during their processing.
  • Capability inventory: The skill has Write access to create project files and Bash access for specific git, docker, and chmod operations.
  • Sanitization: The skill uses predefined templates as base structures, but content from context files is applied as overrides to these templates without explicit sanitization steps.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to ensure current and valid infrastructure components are used.
  • It uses WebSearch to identify current stable versions of official Docker images for services like PostgreSQL and Redis to avoid using non-existent or outdated tags.
  • The Dockerfile templates include instructions to download well-known development tools, such as air for Go and uv for Python, from their official repositories.
  • [COMMAND_EXECUTION]: The skill automates the creation and setup of operational shell scripts.
  • It generates a suite of production maintenance scripts (e.g., deploy.sh, update.sh, backup.sh, rollback.sh) based on standard templates.
  • It executes Bash commands to grant executable permissions to these generated scripts in the deploy/scripts/ directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:26 PM