docker-development

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts (scripts/dockerfile_analyzer.py and scripts/compose_validator.py) to perform static analysis on user-provided Dockerfiles and Docker Compose files. These scripts utilize the Python standard library to identify potential misconfigurations and do not perform network operations or unauthorized file system modifications.
  • [SAFE]: The skill identifies and flags common security anti-patterns in Docker configurations, such as running as root, using the ':latest' tag, and baking secrets into image layers, promoting industry-standard security hardening. No malicious patterns or data exfiltration vectors were detected across the analyzed files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 04:01 PM
Security Audit — agent-trust-hub — docker-development