cognee-docker

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard Docker and curl commands for local development and testing. These commands use official Docker images (cognee/cognee:main) and target localhost (127.0.0.1).
  • [DATA_EXPOSURE]: The skill mentions sensitive environment variables like LLM_API_KEY, but correctly uses placeholders (sk-... or shell variable syntax ${LLM_API_KEY:?}) rather than hardcoding actual secrets. It follows best practices by recommending the use of a .env file.
  • [EXTERNAL_DOWNLOADS]: The skill references standard Docker images and local documentation files. All external references are to the vendor's own infrastructure (cognee) or standard service providers (OpenAI, Docker Hub).
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns, base64 obfuscation, or untrusted script piping were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 03:33 AM
Security Audit — agent-trust-hub — cognee-docker