python-containers
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for the agent to execute shell commands for building and running Docker containers, such as
docker buildanddocker run. These commands facilitate the execution of instructions and code within a containerized environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its automated testing and optimization commands. If the agent processes an untrusted application, malicious code or comments within that application could influence the agent's behavior during execution steps like
docker run --rm app python -c "import app". - Ingestion points:
SKILL.md(Agentic Optimizations section) - Boundary markers: None provided to isolate the agent from container output.
- Capability inventory: Uses
Bashto executedockerandpipcommands. - Sanitization: No sanitization is performed on the application code prior to building or running the container.
- [EXTERNAL_DOWNLOADS]: Fetches Docker base images from official repositories (Python Slim) and Google Container Registry (
gcr.io/distroless). These are recognized as trusted and well-known sources.
Audit Metadata