docker
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill actively promotes security best practices, including the use of multi-stage Docker builds to reduce image size and the adoption of non-root users (
USER app) to limit potential privilege escalation within containers.\n- [EXTERNAL_DOWNLOADS]: The Dockerfile templates reference official .NET container images hosted on the Microsoft Container Registry (mcr.microsoft.com), which is a well-known and trusted source.\n- [CREDENTIALS_UNSAFE]: The Docker Compose example includes environment variables with boilerplate credentials (Password=postgres) for a local development database. These are standard development placeholders and do not pose a risk to production environments.
Audit Metadata