devops
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/docker_build.shexecutes shell commands using positional arguments without validation. If an agent uses this script with untrusted user input, it could lead to command execution vulnerabilities. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface where user-controlled data is interpolated into shell commands.
- Ingestion points: Positional arguments for the
docker_build.shscript, specifically the image tag and registry variables. - Boundary markers: No boundary markers or delimiters are used in the scripts or instructions to separate instructions from user-provided data.
- Capability inventory: The skill has the capability to execute
docker buildanddocker pushthrough thescripts/docker_build.shscript. - Sanitization: There is no evidence of input validation, escaping, or sanitization for the parameters used within the shell script.
Audit Metadata