docker-compose
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing standard Docker Compose CLI commands for project management and troubleshooting.
- [DATA_EXFILTRATION]: The skill implements and documents security best practices for secret management, specifically instructing against hardcoding credentials and recommending file-based secrets.
- [DYNAMIC_EXECUTION]: A local helper script (compose-doctor.sh) uses a Python snippet to process command output, which is handled safely as data rather than executable code.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies the surface area of processing user-provided configuration files and provides mitigation guidance to ensure secure operation.
Audit Metadata