docker-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for Docker best practices. All provided code blocks are standard configurations for local development.
- [SAFE]: The
docker-compose.ymlexamples use default development credentials (e.g.,postgres:postgres) for local database instances, which is standard practice and does not represent a credential leak. - [SAFE]: The security section correctly identifies and warns against anti-patterns such as hardcoding secrets in images or running containers as root.
- [SAFE]: The recommended
dockerignoreand.envpractices align with industry security standards for preventing accidental data exposure. - [SAFE]: All external images referenced (e.g.,
node:22-alpine,postgres:16-alpine,axllent/mailpit) are well-known, official, or widely-used community images for development.
Audit Metadata