docker-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and best practice guidelines for containerization, focusing on security hardening and performance.
- [SAFE]: It promotes secure defaults, such as using non-root users (USER node) and preventing credential exposure in image layers through the use of build secrets (--mount=type=secret).
- [SAFE]: The documentation encourages the use of .dockerignore to prevent sensitive local files like .env from being accidentally included in build contexts.
- [SAFE]: All image references and package manager examples use official sources or well-known registries without any suspicious redirection or typosquatted names.
Audit Metadata