containers
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces robust security defaults, such as running containers as non-root users, using read-only filesystems, and dropping all Linux capabilities by default.
- [SAFE]: Documentation and templates reference trusted ecosystem tools and images, such as Google's distroless images, Docker Scout, Trivy, and Cosign for supply chain integrity.
- [SAFE]: No instances of prompt injection, data exfiltration, or obfuscated code were detected in the skill's instructions or reference files.
- [SAFE]: The skill provides explicit guidance on avoiding common security pitfalls, such as mounting the Docker socket or passing secrets via environment variables.
Audit Metadata