docker-expert
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system utilities including
docker,docker-compose,find, andgrepto analyze the local development environment and validate container builds. These operations are essential for the skill's primary purpose of Docker optimization and troubleshooting. - [EXTERNAL_DOWNLOADS]: The provided templates reference official and well-known images from Docker Hub and Google Container Registry (e.g.,
node:18-alpine,postgres:15-alpine,gcr.io/distroless/nodejs18-debian11). These are recognized as safe, industry-standard sources for container base images. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted local project files like
Dockerfileanddocker-compose.ymlwhich are then processed by the agent. - Ingestion points: Files identified via
find . -name "Dockerfile*"andfind . -name "*compose*.yml". - Boundary markers: None explicitly defined for file content ingestion.
- Capability inventory: Executes
docker build,docker run, anddocker execas part of its validation logic. - Sanitization: No specific sanitization or escaping of file content is mentioned before processing.
Audit Metadata