The Agent Skills Directory

[COMMAND_EXECUTION]: The Python scripts scripts/agent.py and scripts/process.py utilize the subprocess.run() function to execute the Trivy CLI. The implementation is secure as it uses list-based arguments instead of shell strings, preventing shell injection vulnerabilities. Additionally, the scripts implement execution timeouts to prevent denial-of-service conditions during long-running scans.
[EXTERNAL_DOWNLOADS]: The skill references and downloads well-known security resources, including the aquasecurity/trivy-action GitHub Action, the aquasec/trivy Docker image, and vulnerability databases from official Trivy sources. These are recognized industry-standard tools for container security.
[INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection as it ingests and processes untrusted data from external sources like Dockerfiles, IaC manifests, and container images. However, the risk is mitigated by the skill's use of structured parsing and reporting, which treats input as data rather than instructions.
[METADATA_POISONING]: There is a minor inconsistency between the skill's frontmatter author ('mahipal') and the license copyright holder ('mukul975'). This appears to be a documentation artifact and does not impact the security or functionality of the skill.

scanning-containers-with-trivy-in-cicd