create-dockerfile-ci
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
docker-compose.ci.ymltemplate contains hardcoded credentials (MYSQL_ROOT_PASSWORD: root). While common for local CI testing, these should be replaced with environment secrets for security. - [COMMAND_EXECUTION]: The skill generates instructions for executing package management commands like
apk add,pecl install, andcomposer installwithin Docker containers. - [SAFE]: The skill follows security best practices by including a
.dockerignorefile to prevent sensitive file exposure and implementing a non-root user (USER app) in the production environment template.
Audit Metadata