docker-build-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates shell scripts for GitHub Actions that execute Docker commands (pull, stop, rm, run, prune) on a remote server. This is the primary intended function of the skill to facilitate automated deployment.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where user-provided inputs like ports and environment file paths are interpolated directly into generated templates.
- Ingestion points: User-supplied parameters (
--port,--host-port,--env-file) collected during interactive prompts in SKILL.md. - Boundary markers: No specific boundary markers or instruction-ignoring wrappers are used around the interpolated variables in
templates/docker-deploy.yml. - Capability inventory: The generated workflow utilizes
appleboy/ssh-action@v1to execute shell commands withsudoprivileges on a remote host. - Sanitization: There is no explicit sanitization logic defined in the skill instructions to validate or escape these inputs before they are written into the shell script sections of the workflow file.
Audit Metadata