deployment-patterns

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill content is purely educational, providing best-practice templates for containerization and deployment without any executable malicious payloads.
  • [SAFE]: Dockerfile examples implement robust security measures, such as multi-stage builds to minimize image surface area and the use of non-root users (USER appuser) for runtime execution.
  • [SAFE]: External references in the CI/CD workflows target well-known and official GitHub Actions (e.g., actions/checkout, docker/setup-buildx-action) and Docker image registries.
  • [SAFE]: Configuration management guidelines explicitly recommend against hardcoding secrets, advocating for environment variable injection and validation using schemas like Zod.
  • [SAFE]: Health check implementations use standard tools (wget, urllib.request) to monitor local service availability and do not involve unauthorized network data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 12:58 PM
Security Audit — agent-trust-hub — deployment-patterns