hadolint
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions direct the agent to use sudo for system package installation (apt-get install hadolint) and chmod +x to set execution permissions for a binary in /usr/local/bin.
- [EXTERNAL_DOWNLOADS]: The skill fetches the latest hadolint binary from its official releases on GitHub.
- [COMMAND_EXECUTION]: Shell commands are utilized for installation checks, package management, modifying file permissions, and executing the linter via local binary or Docker containers.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill reads and processes the content of user-provided Dockerfiles to perform analysis. 2. Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat the Dockerfile content as untrusted data or to ignore embedded instructions. 3. Capability inventory: The skill leverages powerful CLI tools such as sudo, wget, docker, and the hadolint binary. 4. Sanitization: The instructions do not specify any sanitization or validation of the input file content before it is passed to the analysis tools.
Audit Metadata