docker-packaging
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides Dockerfile templates that fetch the
uvtool from the official GitHub Container Registry (ghcr.io/astral-sh/uv). This is an expected pattern for modern Python dependency management. - [INDIRECT_PROMPT_INJECTION]: The skill identifies the application stack and project structure to generate tailored Docker configurations. This creates a surface where project metadata influences agent output.
- Ingestion points: Detection of project stack and entry points (SKILL.md).
- Boundary markers: None specified in the templates.
- Capability inventory: The workflow suggests the agent or user execute shell commands like
docker buildanddocker run(SKILL.md). - Sanitization: Not explicitly performed; the skill relies on the user to review generated configurations.
Audit Metadata