debugging-docker
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- COMMAND_EXECUTION (LOW): Scripts like
analyze-build-failure.shandinspect-container.shexecute localdockerandawsCLI commands to perform diagnostics, which is the primary purpose of the skill. - DATA_EXFILTRATION (LOW):
inspect-container.shretrieves environment variables and logs from containers. This may expose secrets or configuration data to the agent if they are stored in the environment. - INDIRECT_PROMPT_INJECTION (LOW): The skill processes untrusted data from Docker build logs and container metadata. * Ingestion points:
scripts/analyze-build-failure.sh(log file content),scripts/inspect-container.sh(container logs and metadata). * Boundary markers: None; data is output directly. * Capability inventory: Access todockerandawscommands. * Sanitization: None; output is raw text. - DYNAMIC_EXECUTION (LOW):
scripts/check-platform.shgenerates a temporary Dockerfile and executesdocker buildfor diagnostic verification using a fixed template.
Audit Metadata