docker-traefik
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/traefik-manager.shexecutesdockeranddocker composecommands to manage the Traefik proxy and worktree-specific services.\n- [COMMAND_EXECUTION]: The skill mounts the host's Docker socket (/var/run/docker.sock) into the Traefik container with read-only permissions (:ro). While this is a high-privilege operation, it is a standard requirement for Traefik's Docker provider to perform service discovery and is correctly restricted to read-only access.\n- [EXTERNAL_DOWNLOADS]: The script pulls and executes the officialtraefik:v3.0image from Docker Hub, which is a well-known and trusted service.\n- [COMMAND_EXECUTION]: The script dynamically generates Docker Compose override files (.docker-compose.traefik.yml) within worktree directories to inject necessary routing labels and network configurations.
Audit Metadata