docker-swarm
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use a wide array of Docker management tools (e.g.,
docker_swarmInit,docker_serviceCreate,docker_nodeUpdate) which modify the host's container orchestration state. These tools are used within the context of their intended purpose for cluster management. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests untrusted user inputs such as container image names, service configurations, and join tokens, which are then used as arguments for Docker commands.
- Ingestion points: User-provided service details (image, replicas, ports) and cluster details (join tokens) listed in
SKILL.md. - Boundary markers: The skill does not explicitly define delimiters or specific 'ignore' instructions for user-provided data.
- Capability inventory: The skill utilizes capabilities to create services (
docker_serviceCreate), update nodes (docker_nodeUpdate), and modify swarm settings (docker_swarmUpdate). - Sanitization: No explicit sanitization or validation logic is described for the user-supplied strings before they are passed to the MCP tools.
- [NO_CODE]: The analyzed skill consists entirely of markdown instructions and metadata. It does not include any accompanying scripts, executables, or binary files.
Audit Metadata