devcontainer-exec
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is to execute shell commands within a Docker container using
docker exec. This is used for project tasks like building, testing, and linting, which provides isolation from the host environment. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and run the official@devcontainers/clifrom the npm registry to manage container lifecycles. This is a standard tool for managing Dev Containers. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data by reading Docker container metadata and labels. It mitigates potential risks by including mandatory verification steps for the container identity, the active user, and the bind-mount workspace paths before any command is executed.
Audit Metadata