docker-compose
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional text and configuration templates for Docker Compose, serving as a reference guide for developers.\n- [SAFE]: Hardcoded credentials found in the YAML examples (e.g., 'POSTGRES_PASSWORD: secret') are clearly generic placeholders used for illustrative purposes and do not constitute a sensitive data leak.\n- [SAFE]: The skill references container images from well-known registries (Docker Hub) and sources from GitHub, which are standard for DevOps tools.\n- [SAFE]: The inclusion of a Docker socket mount ('/var/run/docker.sock') in the Traefik example is a standard requirement for that specific tool to function; the skill correctly suggests using the read-only (':ro') flag to limit the security surface area.
Audit Metadata