d1-00-postgres-docker

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run standard shell commands to manage Docker containers.
  • Evidence: Executes docker compose up -d and docker compose ps to start and verify the database service.
  • [EXTERNAL_DOWNLOADS]: The configuration pulls an official database image from a well-known public registry.
  • Evidence: The assets/docker-compose.db.yml file specifies the postgres:17 image from Docker Hub.
  • [CREDENTIALS_UNSAFE]: The skill includes hardcoded default credentials which are explicitly defined as drill defaults.
  • Evidence: POSTGRES_USER: sic and POSTGRES_PASSWORD: sic are present in the compose file. These are consistent with the vendor prefix 'sic' and are intended for a local training environment rather than production use.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 10:33 AM
Security Audit — agent-trust-hub — d1-00-postgres-docker