cognee-docker
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard Docker and curl commands for local development and testing. These commands use official Docker images (
cognee/cognee:main) and target localhost (127.0.0.1). - [DATA_EXPOSURE]: The skill mentions sensitive environment variables like
LLM_API_KEY, but correctly uses placeholders (sk-...or shell variable syntax${LLM_API_KEY:?}) rather than hardcoding actual secrets. It follows best practices by recommending the use of a.envfile. - [EXTERNAL_DOWNLOADS]: The skill references standard Docker images and local documentation files. All external references are to the vendor's own infrastructure (cognee) or standard service providers (OpenAI, Docker Hub).
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, base64 obfuscation, or untrusted script piping were found.
Audit Metadata