optimize-docker-build-cache
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and optimize an 'Existing Dockerfile' provided by the user. This creates a surface for indirect prompt injection where malicious instructions embedded in the Dockerfile (e.g., in comments or metadata) could influence the agent's behavior. The skill lacks explicit boundary markers or sanitization steps for this untrusted input while requiring powerful tools like 'Bash' and 'Write'.
- [COMMAND_EXECUTION]: The skill instructions include the execution of shell commands to perform Docker builds and configure build environments. Evidence: Step 6 (DOCKER_BUILDKIT=1 docker build) and Step 7 (docker buildx create) in SKILL.md. These are intended for the primary function of the skill but involve direct shell interaction.
- [EXTERNAL_DOWNLOADS]: The skill configuration and examples reference external Docker images. Evidence: Step 1 and Step 3 in SKILL.md reference 'rocker/r-ver:4.5.0'. This is a well-known community resource for the R programming language and is considered a safe reference in this context.
Audit Metadata