container-security-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download installation scripts for security tools including Trivy and Grype from their respective official GitHub repositories (aquasecurity and anchore).
- [REMOTE_CODE_EXECUTION]: The documentation includes shell commands to execute downloaded installation scripts for container security scanners. The provided commands include a step to display the script content for review prior to execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external files such as Dockerfiles and Kubernetes manifests to identify security misconfigurations.
- Ingestion points: The skill searches for and reads
Dockerfileand Kubernetes.yamlfiles within the project directory, as documented inreferences/detailed-guide.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the contents of these files as untrusted data.
- Capability inventory: The skill utilizes shell command execution capabilities to run Docker, Trivy, Hadolint, and kubectl commands across several files including
SKILL.mdandreferences/detailed-guide.md. - Sanitization: No specific sanitization or validation of the ingested file content is performed before processing.
Audit Metadata