java-docker

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official Docker images for Java development.
  • Evidence: FROM eclipse-temurin:21-jdk-alpine and FROM gcr.io/distroless/java21-debian12 in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided task descriptions (e.g., "analyze the current implementation") to generate or modify Dockerfiles and JVM configurations.
  • Ingestion points: User input provided during skill invocation as described in references/GUIDE.md.
  • Boundary markers: None identified in the skill instructions to delimit user input from system instructions.
  • Capability inventory: The skill allows the agent to use Bash, Write, Read, Glob, and Grep tools (defined in SKILL.md).
  • Sanitization: No input sanitization or validation logic for the user-provided task description is present in the provided scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 06:43 PM
Security Audit — agent-trust-hub — java-docker