create-docker-entrypoint

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The generated entrypoint scripts implement robust signal handling using trap for SIGTERM, SIGQUIT, and SIGINT to ensure the container stops gracefully.
  • [COMMAND_EXECUTION]: The skill provides templates that execute local framework CLI commands like php bin/console (Symfony) or php artisan (Laravel) for database migrations and cache management during container startup.
  • [SAFE]: Permissions management is restricted to local application directories (var/ or storage/) using chown to ensure the web server user can write to necessary directories within the container.
  • [SAFE]: Service readiness checks are performed locally via the wait-for-it.sh utility, which uses netcat (nc) to verify connectivity to defined infrastructure hosts like databases or message brokers.
  • [SAFE]: The scheduler entrypoint template utilizes crontab to manage application task scheduling, which is the intended and standard functionality for a cron-based container.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 09:58 AM