docker-packaging
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: Provides standard and well-structured Docker templates for Python, TypeScript/Bun, and Go projects, incorporating optimization and security features.
- [EXTERNAL_DOWNLOADS]: References official images and binaries from well-known services like GitHub Container Registry (ghcr.io/astral-sh/uv) and Docker Hub (oven/bun, golang, postgres).
- [CREDENTIALS_UNSAFE]: Includes a development-only placeholder password in the Docker Compose template; however, the skill also provides clear security guidance against hardcoding real secrets in production environments.
- [PROMPT_INJECTION]: The skill analyzes user project files to generate configurations, creating an attack surface for indirect prompt injection.
- Ingestion points: User project structure and content analysis in SKILL.md.
- Boundary markers: Absent for input data processing.
- Capability inventory: Includes shell commands for building and running containers in SKILL.md.
- Sanitization: No explicit sanitization of project-provided data before template generation.
Audit Metadata