docker
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses directives such as "AUTONOMOUS MODE", "Do NOT ask questions", and "Do NOT pause for confirmation" to streamline execution by bypassing standard interaction and confirmation prompts.
- [DATA_EXFILTRATION]: The skill includes a telemetry feature that appends execution outcomes to a local metadata file in the
~/.claude/projects/directory. This is used for cross-session tracking of the tool's performance within the platform's internal state. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes various project manifest files (e.g., package.json, pyproject.toml, requirements.txt) to determine the technology stack. This creates a surface for indirect prompt injection where malicious content within these files could potentially influence the generated Docker configuration.
- Ingestion points: Manifest files identified during Phase 1 stack detection.
- Boundary markers: None present in the instructions.
- Capability inventory: The skill is capable of file system writes (Dockerfile, docker-compose.yml, skill-telemetry.md) and executing shell commands via the agent platform.
- Sanitization: No explicit sanitization or validation of the content read from manifest files is specified in the instructions.
Audit Metadata