containerization-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several utility scripts (
scripts/image-optimizer.py,scripts/image-scanner.sh) that use the Docker CLI via subprocess calls and shell commands to retrieve image metadata, check sizes, and perform security scans. This functionality is essential and standard for the skill's purpose of container optimization. - [DATA_EXFILTRATION]: The skill contains a defensive security feature in
scripts/dockerfile-linter.pythat uses regular expressions to detect potentially hardcoded secrets (API keys, passwords, tokens) in Dockerfiles. No logic for external data transmission was found. - [SAFE]: The documentation and scripts consistently promote security hardening techniques, such as implementing non-root users, using multi-stage builds to reduce attack surface, and scanning images for vulnerabilities using tools like Trivy.
Audit Metadata