docker-expert
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to gather information about the local environment and project files, including 'docker info', 'docker context ls', and 'find' to locate Docker-related files.
- [COMMAND_EXECUTION]: Validation logic involves executing 'docker build' and 'docker run' to ensure the proposed container configurations are functional. These are standard operations for the skill's intended purpose.
- [SAFE]: The skill provides extensive documentation and examples for security hardening, specifically addressing non-root user creation, secrets management (using Docker secrets rather than environment variables), and the use of minimal base images like Alpine and distroless.
Audit Metadata