docker-containers

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill implements security best practices for Docker, including multi-stage builds to reduce image size and attack surface, and configuring the container to run as a non-root user (USER $APP_UID).
  • [EXTERNAL_DOWNLOADS]: References official Microsoft Docker images (mcr.microsoft.com/dotnet/*) and standard community images (postgres, redis, rabbitmq) for the application infrastructure. These are well-known and trusted sources.
  • [CREDENTIALS_UNSAFE]: Includes generic credentials (e.g., "devpass", "guest") within the Docker Compose development file. These are clearly intended for local development and testing purposes and function as defaults rather than production secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 10:14 AM
Security Audit — agent-trust-hub — docker-containers