image-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and examples for Docker image optimization techniques such as multi-stage builds and base image selection.- [COMMAND_EXECUTION]: The mention of 'rm -rf /root/.npm' in the examples is a standard cleanup instruction within a Dockerfile context intended to reduce image size and does not pose a threat to the host system or agent environment.- [EXTERNAL_DOWNLOADS]: The skill references reputable external projects such as Google's Distroless images and the 'dive' analysis tool, which are well-known and considered safe references.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Dockerfiles to offer optimization advice. While this is an entry point for untrusted data, the risk is evaluated as safe because the skill's operations are limited to text-based analysis and metadata queries via the Docker daemon's tools.
Audit Metadata