docker-compose
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): No malicious patterns or threats detected. The skill serves its stated purpose of generating Docker configurations.- [BEST_PRACTICES] (INFO): The provided Dockerfile follows security best practices by using a multi-stage build and switching to a non-root user (
USER node) in the production stage.- [CREDENTIALS_UNSAFE] (INFO): The templates use placeholder credentials (user,pass). Per the analysis framework, these are considered standard placeholders for illustrative purposes and do not constitute a credential exposure finding.- [INDIRECT_PROMPT_INJECTION] (LOW): The skill processes user requirements to generate code. While this is an inherent attack surface for code-generation skills, no exploitable capabilities (like direct command execution or network exfiltration from the host) are exposed by the skill itself.
Audit Metadata