devcontainer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference and best practice guide for Dev Container configuration. It contains no executable code or malicious instructions.
- [EXTERNAL_DOWNLOADS]: The skill recommends using official Dev Container features and base images from trusted registries such as
mcr.microsoft.comandghcr.io/devcontainers/features/. These are standard, industry-accepted sources for containerized development environments. - [COMMAND_EXECUTION]: Instructions include examples for lifecycle hooks like
postCreateCommandandpostStartCommand. These are used to automate project setup tasks such as installing dependencies via standard package managers (npm, pip, dotnet). The provided examples use well-known tools and follow security best practices, such as recommending the use of environment variables for connection strings. - [CREDENTIALS_UNSAFE]: The documentation includes example connection strings (e.g.,
postgresql://user:pass@db:5432/mydb). These use clear placeholder credentials for illustrative purposes and do not represent actual sensitive data leakage.
Audit Metadata