docker
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a documentation and command wrapper for the official Docker CLI, referencing legitimate resources and standard installation procedures via Homebrew.
- [COMMAND_EXECUTION]: The skill defines an installation command ('brew install docker') and lists common Docker commands for managing containers, images, and services. These are standard operations for the tool's intended purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill's ability to execute commands in containers or build images from Dockerfiles creates a potential surface for indirect prompt injection if the agent is instructed to use untrusted external data.
- Ingestion points: User-provided commands and parameters for Docker operations (SKILL.md).
- Boundary markers: None.
- Capability inventory: Full Docker CLI including run, build, and exec (SKILL.md).
- Sanitization: None.
Audit Metadata