dockerfile
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill instructions focus on security hardening, such as advocating for non-root users, utilizing multi-stage builds to minimize attack surfaces, and pinning base images via immutable digests.
- [EXTERNAL_DOWNLOADS]: References and recommends the use of reputable security tools like hadolint, trivy, and dive from established GitHub repositories and well-known organizations.
- [COMMAND_EXECUTION]: Provides instructions for the agent to execute standard, benign CLI tools (e.g., docker, hadolint, mise) to facilitate Dockerfile optimization and security auditing.
- [DATA_EXFILTRATION]: Specifically addresses data safety by warning against the use of ARG and ENV for secrets, instead directing users toward secure alternatives like BuildKit secret mounts.
Audit Metadata