skills/thelobbi/claude/docker-build/Gen Agent Trust Hub

docker-build

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of standard development and DevOps command-line tools, including git for version tracking, docker for image creation and registry interaction, jq for JSON processing, and az (Azure CLI) for repository management. These are used for their intended primary purposes.
  • [INDIRECT_PROMPT_INJECTION]: The provided bash scripts use placeholders such as <registry>, <image>, and <branch>. These identify an attack surface where, if an automated agent populates these placeholders with unvalidated user-provided data, it could lead to command injection. However, as documented, these are templates for build processes and do not include automated execution logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 10:14 AM
Security Audit — agent-trust-hub — docker-build