container-security-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts for security tools such as Trivy and Grype and Kubernetes deployment manifests from official GitHub repositories of well-known technology organizations.
- [COMMAND_EXECUTION]: Instructs the agent to use common shell commands like find and grep to inspect local configuration files to determine the project's security posture.
- [REMOTE_CODE_EXECUTION]: Includes procedures for installing CLI tools via shell scripts downloaded from trusted sources. The instructions include explicit warnings to review the script contents before execution.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes Dockerfiles and Kubernetes manifests provided by the user, which creates a surface for processing untrusted data.
- Ingestion points: Dockerfiles and Kubernetes manifest files located via project inspection.
- Boundary markers: No explicit instructions are provided to the agent to disregard embedded natural language instructions within the processed configuration files.
- Capability inventory: Local file discovery and reading, network downloads, and shell command execution.
- Sanitization: Relies on external security scanners to interpret file contents; no additional sanitization is implemented within the skill's own logic.
Audit Metadata