Skills
skills/roger-235/my_skill_repo/docker-development/Gen Agent Trust Hub

docker-development

Warn

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to execute shell commands using python3 to run analysis utilities (scripts/dockerfile_analyzer.py and scripts/compose_validator.py) against user-provided files.
  • [EXTERNAL_DOWNLOADS]: Installation instructions direct users to clone code from an untrusted external repository: https://github.com/alirezarezvani/claude-skills.git.
  • [REMOTE_CODE_EXECUTION]: The skill workflow involves executing scripts that are not included in the provided package but are instead fetched from an external source, posing a risk of running arbitrary or malicious code during the analysis phase.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection.
  • Ingestion points: Reads user-provided Dockerfile and docker-compose.yml contents (SKILL.md).
  • Boundary markers: None identified; untrusted data is processed directly.
  • Capability inventory: Executes subprocess calls via python3 scripts (SKILL.md).
  • Sanitization: No validation or sanitization of file content or file paths is mentioned before execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 5, 2026, 08:06 PM
Security Audit — agent-trust-hub — docker-development