docker-expert
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill emphasizes security best practices, such as using non-root users, secrets management (using Docker secrets instead of environment variables), and minimal base images to reduce the attack surface.
- [COMMAND_EXECUTION]: Employs standard Docker CLI and shell commands (e.g.,
docker build,docker ps,find,grep) for environment diagnostics and build validation. These operations are restricted to the intended purpose of the skill. - [EXTERNAL_DOWNLOADS]: References official and well-known base images from Docker Hub (e.g., Alpine, Node) and Google Container Registry (
gcr.io/distroless), which are trusted sources for container infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided Dockerfiles and Compose configurations. While this is an attack surface, the skill does not include any patterns for automatically executing instructions embedded within the processed data.
Audit Metadata