docker-management
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is the execution of Docker CLI commands through a terminal interface.
- [PRIVILEGE_ESCALATION]: Documentation includes instructions for using
sudoand executing commands as therootuser within containers (docker exec -u root). These elevated privileges are necessary for standard Docker operations. - [INDIRECT_PROMPT_INJECTION]: The skill includes procedures for reading container logs (
docker logs) and inspecting metadata (docker inspect), which creates an attack surface where untrusted data from a container could influence the agent's behavior. 1. Ingestion points: Container logs (docker logs), container inspection data (docker inspect), and command outputs from within containers (docker exec). 2. Boundary markers: None identified. 3. Capability inventory: Terminal toolset allowing arbitrary command execution on the host. 4. Sanitization: No explicit sanitization or filtering of container-generated data is described.
Audit Metadata