docker-patterns

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference guide for Docker best practices. All provided code blocks are standard configurations for local development.
  • [SAFE]: The docker-compose.yml examples use default development credentials (e.g., postgres:postgres) for local database instances, which is standard practice and does not represent a credential leak.
  • [SAFE]: The security section correctly identifies and warns against anti-patterns such as hardcoding secrets in images or running containers as root.
  • [SAFE]: The recommended dockerignore and .env practices align with industry security standards for preventing accidental data exposure.
  • [SAFE]: All external images referenced (e.g., node:22-alpine, postgres:16-alpine, axllent/mailpit) are well-known, official, or widely-used community images for development.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 05:23 AM