docker

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill actively promotes security best practices, including the use of multi-stage Docker builds to reduce image size and the adoption of non-root users (USER app) to limit potential privilege escalation within containers.\n- [EXTERNAL_DOWNLOADS]: The Dockerfile templates reference official .NET container images hosted on the Microsoft Container Registry (mcr.microsoft.com), which is a well-known and trusted source.\n- [CREDENTIALS_UNSAFE]: The Docker Compose example includes environment variables with boilerplate credentials (Password=postgres) for a local development database. These are standard development placeholders and do not pose a risk to production environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:06 PM
Security Audit — agent-trust-hub — docker