docker-development
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
scripts/dockerfile_analyzer.pyandscripts/compose_validator.py) to perform static analysis on user-provided Dockerfiles and Docker Compose files. These scripts utilize the Python standard library to identify potential misconfigurations and do not perform network operations or unauthorized file system modifications. - [SAFE]: The skill identifies and flags common security anti-patterns in Docker configurations, such as running as root, using the ':latest' tag, and baking secrets into image layers, promoting industry-standard security hardening. No malicious patterns or data exfiltration vectors were detected across the analyzed files.
Audit Metadata