deployment-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is purely educational, providing best-practice templates for containerization and deployment without any executable malicious payloads.
- [SAFE]: Dockerfile examples implement robust security measures, such as multi-stage builds to minimize image surface area and the use of non-root users (
USER appuser) for runtime execution. - [SAFE]: External references in the CI/CD workflows target well-known and official GitHub Actions (e.g.,
actions/checkout,docker/setup-buildx-action) and Docker image registries. - [SAFE]: Configuration management guidelines explicitly recommend against hardcoding secrets, advocating for environment variable injection and validation using schemas like Zod.
- [SAFE]: Health check implementations use standard tools (
wget,urllib.request) to monitor local service availability and do not involve unauthorized network data exfiltration.
Audit Metadata