aif-dockerize
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the project codebase and specific context files to guide the generation of Docker configurations and shell scripts.
- Ingestion points: The skill reads
.ai-factory/DESCRIPTION.md,.ai-factory/skill-context/aif-dockerize/SKILL.md, and scans project source files usingGlobandGrepto determine the tech stack. - Boundary markers: Project-specific context files are treated as mandatory overrides; no specific boundary delimiters are used during their processing.
- Capability inventory: The skill has
Writeaccess to create project files andBashaccess for specificgit,docker, andchmodoperations. - Sanitization: The skill uses predefined templates as base structures, but content from context files is applied as overrides to these templates without explicit sanitization steps.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to ensure current and valid infrastructure components are used.
- It uses
WebSearchto identify current stable versions of official Docker images for services like PostgreSQL and Redis to avoid using non-existent or outdated tags. - The Dockerfile templates include instructions to download well-known development tools, such as
airfor Go anduvfor Python, from their official repositories. - [COMMAND_EXECUTION]: The skill automates the creation and setup of operational shell scripts.
- It generates a suite of production maintenance scripts (e.g.,
deploy.sh,update.sh,backup.sh,rollback.sh) based on standard templates. - It executes
Bashcommands to grant executable permissions to these generated scripts in thedeploy/scripts/directory.
Audit Metadata