container-image-patching
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to run
dockerand package management commands. These are standard utilities for container patching. - [EXTERNAL_DOWNLOADS]: Instructions guide the installation of the Trivy security scanner from official sources via standard system package managers.
- [DYNAMIC_EXECUTION]: The agent is instructed to generate a temporary Dockerfile at runtime to apply patches, which is necessary for the skill's core function.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external scanner outputs (Trivy) to determine which packages to upgrade. Ingestion points: Trivy scan results processed in SKILL.md. Boundary markers: None present. Capability inventory:
docker build,docker pull, andapt-getcommands in SKILL.md. Sanitization: The instructions mandate the--only-upgradeflag to restrict the scope of automated package changes.
Audit Metadata