create-multistage-dockerfile
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes security best practices by providing templates that use multi-stage builds to minimize the production image's attack surface.
- [SAFE]: Includes specific instructions for implementing non-privileged users (
USER app) in Node.js and Python environments to mitigate container breakout risks. - [EXTERNAL_DOWNLOADS]: References official base images for Node.js, Python, Go, and Rust from Docker Hub, as well as Google's Distroless images. These are well-known and trusted sources.
- [COMMAND_EXECUTION]: Uses standard tool access (Bash) for legitimate purposes, specifically for building Docker images and verifying their sizes as part of the optimization workflow.
Audit Metadata