production-docker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides standard production hardening guidelines for Docker environments. It focuses on reducing attack surfaces through multi-stage builds, distroless images, and non-root execution.
- [EXTERNAL_DOWNLOADS]: The skill references the
aquasecurity/trivy-actionGitHub Action for image scanning. This is a well-known service provided by a reputable security organization and is documented neutrally as a recommended practice for CI/CD pipelines.
Audit Metadata