chatqna-docker-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a clear and restricted deployment workflow using Docker Compose, which is the primary and expected function of the tool.
- [COMMAND_EXECUTION]: The skill uses standard CLI tools (
docker,docker compose,curl) for container orchestration and health monitoring. These commands are appropriately scoped to managing the application lifecycle. - [EXTERNAL_DOWNLOADS]: The skill identifies and uses prebuilt images from the
intel/organization. This is a well-known and expected source given the application context. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe handling of sensitive data by instructing users to provide the
HUGGINGFACEHUB_API_TOKENvia environment variables, avoiding the risk of hardcoded secrets in the codebase.
Audit Metadata