devcontainers
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of development utilities like DevSpace and DevPod from their official GitHub releases (loft-sh).
- [DATA_EXFILTRATION]: Configuration examples include bind-mounting sensitive host configuration directories such as ~/.kube and ~/.gnupg to enable Kubernetes and GPG signing integration within the container. This is a standard and documented practice for development environments.
- [COMMAND_EXECUTION]: The skill provides instructions for utilizing container lifecycle hooks (e.g., postCreateCommand, initializeCommand) and shell commands to automate dependency installation and workspace setup.
Audit Metadata