docker-first-runner

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/detect-env.js uses Node.js's child_process.execSync to run diagnostic commands such as docker --version, docker ps, python3 --version, and which to detect the local development environment.
  • [COMMAND_EXECUTION]: The references/strategy-guide.md file provides command templates for running scripts via Docker (e.g., docker run --rm -v "$(pwd):/workspace" ...) and suggests installation commands for different operating systems.
  • [SAFE]: The functionality aligns strictly with the skill's stated purpose of helping an AI agent choose the best execution environment. No suspicious remote connections, obfuscation, or data exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:38 AM