docker-expert
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows container security best practices, such as recommending non-root users and the use of secrets management over environment variables.
- [COMMAND_EXECUTION]: The skill utilizes local shell commands (
docker version,docker info,find,docker ps,docker images) exclusively for environment discovery and configuration validation. These operations are standard for a DevOps tool and do not involve unsafe user-input interpolation. - [EXTERNAL_DOWNLOADS]: The Dockerfile and Compose templates provided by the skill reference trusted, official base images from well-known registries (e.g., Docker Hub official images and Google Container Registry). No unverifiable dependencies or remote script execution from untrusted sources were found.
Audit Metadata