docker-debugger
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze output from Docker commands, which could potentially contain untrusted instructions.\n
- Ingestion points: Data enters the context via
docker logs,docker inspect, anddocker-compose logsmentioned inSKILL.md.\n - Boundary markers: The instructions lack explicit markers to delimit untrusted container output.\n
- Capability inventory: The agent is authorized to use
docker exec,docker-compose, and build tools as outlined inSKILL.md.\n - Sanitization: No sanitization or filtering of container output is specified before the agent processes it.
Audit Metadata