create-dockerfile-ci

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The docker-compose.ci.yml template contains hardcoded credentials (MYSQL_ROOT_PASSWORD: root). While common for local CI testing, these should be replaced with environment secrets for security.
  • [COMMAND_EXECUTION]: The skill generates instructions for executing package management commands like apk add, pecl install, and composer install within Docker containers.
  • [SAFE]: The skill follows security best practices by including a .dockerignore file to prevent sensitive file exposure and implementing a non-root user (USER app) in the production environment template.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 09:58 AM