create-dockerfile-dev
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Composer binary from the composer:2.8 Docker Hub image.
- [EXTERNAL_DOWNLOADS]: Installs PHP extensions (redis, amqp, xdebug) from the official PECL registry using specific version constraints.
- [COMMAND_EXECUTION]: Generates Docker instructions to install standard development utilities (git, vim, curl, wget) via the Alpine package manager (apk).
- [PROMPT_INJECTION]: The skill processes project configuration files which serves as an indirect injection surface.
- Ingestion points: Reads composer.json and project structure (SKILL.md).
- Boundary markers: None present.
- Capability inventory: Generates code for Dockerfile.dev and docker-compose.dev.yml.
- Sanitization: No explicit sanitization or validation of the ingested file content before interpolation into the generated Dockerfile templates.
Audit Metadata