docker-build
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard development and DevOps command-line tools, including
gitfor version tracking,dockerfor image creation and registry interaction,jqfor JSON processing, andaz(Azure CLI) for repository management. These are used for their intended primary purposes. - [INDIRECT_PROMPT_INJECTION]: The provided bash scripts use placeholders such as
<registry>,<image>, and<branch>. These identify an attack surface where, if an automated agent populates these placeholders with unvalidated user-provided data, it could lead to command injection. However, as documented, these are templates for build processes and do not include automated execution logic.
Audit Metadata