devcontainer-setup
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template-based generator for development environment configurations. It provides instructions for creating
Dockerfileanddevcontainer.jsonfiles based on detected project languages (Python, Node, Rust, Go). - [SAFE]: The
SKILL.mdfile contains explicit security warnings, advising against grantingNET_ADMINprivileges, mounting sensitive host credentials, or using the Docker socket within the container. - [SAFE]: Reference materials correctly identify security best practices, such as pinning Docker images with SHA256 digests and avoiding the piping of remote network bytes directly into shells or extraction tools.
- [SAFE]: No automated execution of code or installation of external dependencies is performed by the skill itself; it describes a workflow for the agent to follow while generating static configuration files for the user to review.
- [SAFE]: Mentions of trusted external features (e.g.,
ghcr.io/devcontainers/features/rust) are standard industry practices for devcontainer configuration.
Audit Metadata