docker-helper
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE] (SAFE): The skill consists entirely of documentation and configuration templates (Dockerfiles, Docker Compose). No executable scripts or automation logic are included within the skill itself.
- [BEST PRACTICES] (SAFE): The provided templates actively encourage security best practices, including the use of non-root users (USER appuser), multi-stage builds for smaller attack surfaces, and pinned version tags instead of 'latest'.
- [CREDENTIALS_UNSAFE] (SAFE): While the Docker Compose example contains fields like 'POSTGRES_PASSWORD=password', these are clearly identified as generic placeholders for educational purposes and do not represent actual hardcoded secrets.
Audit Metadata