container-security-hardening

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches installation scripts for security tools like Trivy and Grype from their official repositories on GitHub, which belong to established security organizations (Aqua Security and Anchore).
  • [REMOTE_CODE_EXECUTION]: Includes instructions for the local installation of security binaries from trusted sources; these procedures incorporate security best practices, such as downloading to temporary directories and suggesting script inspection before execution.
  • [COMMAND_EXECUTION]: Employs standard shell utilities such as find, grep, and ls to perform local discovery of Dockerfiles and configuration files, ensuring the agent has necessary context to provide accurate security recommendations.
  • [PROMPT_INJECTION]: The skill uses clear, instructional formatting without any patterns associated with bypassing safety filters or overriding system instructions.
  • [DATA_EXFILTRATION]: Network operations are strictly limited to fetching security tools and documentation from reputable domains; no evidence of sensitive local data being transmitted to external or unauthorized servers was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 08:42 PM
Security Audit — agent-trust-hub — container-security-hardening