docker
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze Dockerfiles provided by users or fetched from external environments, creating a potential vector for indirect prompt injection where malicious instructions could be embedded in comments or metadata.
- Ingestion points: External Dockerfiles (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts in the analyzed content.
- Capability inventory: The skill relies on the agent's general text analysis and file reading capabilities.
- Sanitization: No specific input validation or sanitization rules are provided for handling external content.
- [SAFE]: The skill provides standard security hardening recommendations, such as running containers as non-root users, avoiding hardcoded secrets, and pinning specific versions of base images.
- [SAFE]: The example Dockerfile references official images from well-known registries and uses standard package management commands.
Audit Metadata