devcontainer-setup

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a template-based generator for development environment configurations. It provides instructions for creating Dockerfile and devcontainer.json files based on detected project languages (Python, Node, Rust, Go).
  • [SAFE]: The SKILL.md file contains explicit security warnings, advising against granting NET_ADMIN privileges, mounting sensitive host credentials, or using the Docker socket within the container.
  • [SAFE]: Reference materials correctly identify security best practices, such as pinning Docker images with SHA256 digests and avoiding the piping of remote network bytes directly into shells or extraction tools.
  • [SAFE]: No automated execution of code or installation of external dependencies is performed by the skill itself; it describes a workflow for the agent to follow while generating static configuration files for the user to review.
  • [SAFE]: Mentions of trusted external features (e.g., ghcr.io/devcontainers/features/rust) are standard industry practices for devcontainer configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 01:31 PM