docker-development
Warn
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill distributes example configuration files containing hardcoded credentials.
- File
examples/Dockerfile.samplecontains a hardcodedDATABASE_URLwith a password and anAPI_KEYmatching thesk-secret key pattern. - File
examples/docker-compose.sample.ymlincludes multiple hardcoded environment variables for secrets, such asDB_PASSWORD,JWT_SECRET,POSTGRES_PASSWORD, andRABBITMQ_DEFAULT_PASS. - [COMMAND_EXECUTION]: The
compose_validator.pyanddockerfile_analyzer.pyscripts allow specifying arbitrary file paths via the--fileargument for analysis. While intended for local file scanning, this provides a mechanism for the agent to read and process local configuration files.
Audit Metadata