docker-kubernetes

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides high-quality DevOps best practices for Docker and Kubernetes, focusing on production-grade configuration.
  • [SAFE]: Dockerfile examples implement multi-stage builds, non-root users, and minimal base images (Alpine, Slim, Scratch), which are security best practices.
  • [SAFE]: Kubernetes templates include robust SecurityContext settings, such as runAsNonRoot: true, readOnlyRootFilesystem: true, and dropping all capabilities (capabilities: drop: ["ALL"]).
  • [SAFE]: Manifests correctly utilize resource requests and limits, health checks (liveness, readiness, startup probes), and network policies to ensure cluster stability and security.
  • [SAFE]: External references target well-known and trusted registries like GitHub Container Registry (ghcr.io) for image examples.
  • [SAFE]: Credentials found in examples (e.g., user:pass in connection strings) are clearly illustrative placeholders for development environments and do not represent actual secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:13 PM
Security Audit — agent-trust-hub — docker-kubernetes