docker-build-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements and promotes security-focused containerization practices, including multi-stage Docker builds to reduce image size and attack surface, and the use of non-root users within containers.
- [EXTERNAL_DOWNLOADS]: The generated CI/CD templates reference official GitHub Actions from Docker and the standard checkout action, as well as the widely-recognized appleboy/ssh-action for remote server interactions.
- [COMMAND_EXECUTION]: The skill defines an automated deployment workflow that executes standard Docker commands on a remote server via SSH. These operations are essential to the skill's stated purpose and are clearly documented for the user.
- [CREDENTIALS_UNSAFE]: The skill correctly identifies sensitive deployment requirements and instructs the user to configure credentials using GitHub Repository Secrets, preventing the insecure practice of hardcoding sensitive data in the workflow files.
Audit Metadata