nowledge-mem-docker
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various lifecycle commands via a local script
./nmemctland standard Docker CLI tools (docker inspect,docker ps). These are used for routine maintenance such as checking status, viewing logs, and restarting services. - [EXTERNAL_DOWNLOADS]: The skill fetches the deployment stack and maintenance controller from the vendor's official repository at
github.com/nowledge-co/community.git. This is a standard operation for the primary purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect injection as it reads and surfaces server logs and container status. However, the impact is low as the skill's instructions include specific 'Handoff' boundaries that prevent the agent from executing destructive commands, even if requested via processed data.
- [PRIVILEGE_ESCALATION]: The skill documentation addresses the security implications of using a Docker socket (
docker.sock) for the optional auto-update sidecar. It correctly identifies this as a 'host-root-equivalent' privilege and mandates that the agent explain this trade-off to the user before any such configuration is enabled.
Audit Metadata