container-security-hardening
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts for security tools like Trivy and Grype from their official repositories on GitHub, which belong to established security organizations (Aqua Security and Anchore).
- [REMOTE_CODE_EXECUTION]: Includes instructions for the local installation of security binaries from trusted sources; these procedures incorporate security best practices, such as downloading to temporary directories and suggesting script inspection before execution.
- [COMMAND_EXECUTION]: Employs standard shell utilities such as
find,grep, andlsto perform local discovery of Dockerfiles and configuration files, ensuring the agent has necessary context to provide accurate security recommendations. - [PROMPT_INJECTION]: The skill uses clear, instructional formatting without any patterns associated with bypassing safety filters or overriding system instructions.
- [DATA_EXFILTRATION]: Network operations are strictly limited to fetching security tools and documentation from reputable domains; no evidence of sensitive local data being transmitted to external or unauthorized servers was found.
Audit Metadata