java-docker
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Docker images for Java development.
- Evidence:
FROM eclipse-temurin:21-jdk-alpineandFROM gcr.io/distroless/java21-debian12inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided task descriptions (e.g., "analyze the current implementation") to generate or modify Dockerfiles and JVM configurations.
- Ingestion points: User input provided during skill invocation as described in
references/GUIDE.md. - Boundary markers: None identified in the skill instructions to delimit user input from system instructions.
- Capability inventory: The skill allows the agent to use
Bash,Write,Read,Glob, andGreptools (defined inSKILL.md). - Sanitization: No input sanitization or validation logic for the user-provided task description is present in the provided scripts.
Audit Metadata