devcontainer-exec

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's primary function is to execute shell commands within a Docker container using docker exec. This is used for project tasks like building, testing, and linting, which provides isolation from the host environment.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and run the official @devcontainers/cli from the npm registry to manage container lifecycles. This is a standard tool for managing Dev Containers.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data by reading Docker container metadata and labels. It mitigates potential risks by including mandatory verification steps for the container identity, the active user, and the bind-mount workspace paths before any command is executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 10:39 AM