kernel-dev-docker
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No executable code, shell scripts, or binary files are included in this skill. It consists entirely of instructional markdown.
- [SAFE]: The skill actively enforces security best practices, such as requiring containers to run as non-root users, mandating multi-stage builds to reduce image attack surfaces, and forbidding the inclusion of secrets in Docker images.
- [SAFE]: No prompt injection, obfuscation, or data exfiltration patterns were detected. The instructions are prescriptive and focus on infrastructure correctness.
- [SAFE]: While the skill processes untrusted input (Dockerfiles and Compose manifests), it lacks autonomous capabilities like subprocess execution or network operations that could be exploited via indirect prompt injection.
- Ingestion points: Dockerfiles and Docker Compose files.
- Boundary markers: Not explicitly defined for the input content.
- Capability inventory: None. The skill does not use shell commands, file-system writes, or network tools.
- Sanitization: Not applicable as the skill only provides recommendations and logic for the agent's behavior.
Audit Metadata