skills/mukul975/anthropic-cybersecurity-skills/performing-container-image-hardening/Gen Agent Trust Hub
performing-container-image-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the Trivy vulnerability scanner and the Hadolint linter from their respective official GitHub repositories. These are well-known industry-standard tools used for container security auditing.
- [COMMAND_EXECUTION]: The audit scripts (
scripts/agent.pyandscripts/process.py) use the Pythonsubprocessmodule to execute system commands such asdocker,trivy, anddocklefor image inspection and vulnerability scanning. These commands are implemented using list-based arguments, which is a secure practice to mitigate command injection risks.
Audit Metadata