create-docker-entrypoint
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The generated entrypoint scripts implement robust signal handling using
trapfor SIGTERM, SIGQUIT, and SIGINT to ensure the container stops gracefully. - [COMMAND_EXECUTION]: The skill provides templates that execute local framework CLI commands like
php bin/console(Symfony) orphp artisan(Laravel) for database migrations and cache management during container startup. - [SAFE]: Permissions management is restricted to local application directories (
var/orstorage/) usingchownto ensure the web server user can write to necessary directories within the container. - [SAFE]: Service readiness checks are performed locally via the
wait-for-it.shutility, which usesnetcat(nc) to verify connectivity to defined infrastructure hosts like databases or message brokers. - [SAFE]: The scheduler entrypoint template utilizes
crontabto manage application task scheduling, which is the intended and standard functionality for a cron-based container.
Audit Metadata