docker-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for Docker best practices, focusing on local development environments and multi-stage Dockerfiles.
- [SAFE]: It includes explicit security hardening recommendations, such as running containers as non-root users, dropping capabilities, using specific image tags instead of ":latest", and managing secrets via environment variables or Docker secrets rather than hardcoding them.
- [SAFE]: All Docker images referenced (node, postgres, redis, mailpit) are standard, well-known images used for development and testing.
- [SAFE]: The provided configuration examples use placeholder credentials (e.g., "postgres:postgres") specifically intended for local development stacks, which is a standard educational practice.
- [SAFE]: No remote code execution, obfuscation, or data exfiltration patterns were detected in the instructions or example code.
Audit Metadata