docker-agents-generator
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates that implement multi-stage builds, ensuring that build tools and source code are not included in the final production image, which reduces the attack surface.\n- [SAFE]: All generated configurations enforce the use of non-root users (appuser or nobody), mitigating the risk of privilege escalation if a container is compromised.\n- [SAFE]: The skill contains explicit instructions and templates for secret management, specifically advising against hardcoding credentials and promoting the use of .env.example files with safe placeholders.\n- [SAFE]: The skill uses official and well-known base images from trusted organizations like Microsoft, the Eclipse Foundation, and official Docker library images for Node.js, Python, and Go.\n- [SAFE]: The skill mandates the use of HEALTHCHECK instructions, ensuring that orchestration tools can monitor the container's health correctly without requiring elevated privileges.
Audit Metadata