docker-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides industry-standard Docker configuration templates for local development and multi-container orchestration.
- [SAFE]: Includes explicit sections on container security hardening, such as using specific image tags, running as a non-root user, and dropping kernel capabilities (
cap_drop). - [SAFE]: Correctly identifies and recommends secret management best practices, specifically advising the use of
.envfiles (excluded from version control) and Docker secrets rather than hardcoding credentials in images. - [SAFE]: Base images used in examples (e.g.,
node:22-alpine,postgres:17-alpine) are sourced from official, well-known registries. - [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected.
Audit Metadata