docker-specialist

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purpose-built to improve container security. It provides detailed guidance and validation rules to prevent common vulnerabilities such as running containers as root, embedding secrets in images, and using insecure image tags.- [SAFE]: Instructions and reference files promote industry-standard secure patterns, including multi-stage builds, non-root user creation, and proper signal handling via init processes like tini or dumb-init.- [SAFE]: The skill acts as a security assistant by providing regex-based validation patterns in 'references/validations.md' to help the agent identify and correct misconfigurations in user-provided Dockerfiles and Compose files.- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized remote code execution was found. All code examples use standard, well-known base images (e.g., node:20-alpine, python:3.12-slim) and official package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 02:15 PM
Security Audit — agent-trust-hub — docker-specialist