NYC

docker-compose

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOW
Full Analysis
  • [SAFE] (SAFE): No malicious patterns or threats detected. The skill serves its stated purpose of generating Docker configurations.- [BEST_PRACTICES] (INFO): The provided Dockerfile follows security best practices by using a multi-stage build and switching to a non-root user (USER node) in the production stage.- [CREDENTIALS_UNSAFE] (INFO): The templates use placeholder credentials (user, pass). Per the analysis framework, these are considered standard placeholders for illustrative purposes and do not constitute a credential exposure finding.- [INDIRECT_PROMPT_INJECTION] (LOW): The skill processes user requirements to generate code. While this is an inherent attack surface for code-generation skills, no exploitable capabilities (like direct command execution or network exfiltration from the host) are exposed by the skill itself.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 05:13 AM