The Agent Skills Directory

[SAFE]: The skill provides documentation and templates for containerizing Python and Node.js applications using Docker and Docker Compose.
[SAFE]: It includes security-hardening configurations such as non-root user execution (e.g., USER nobody, USER node), read-only filesystems, and the use of Docker secrets to avoid environment variable exposure.
[SAFE]: The provided .dockerignore templates correctly identify sensitive files like .env and .git to prevent accidental inclusion in image layers.
[SAFE]: Credential examples in the Docker Compose configurations (e.g., POSTGRES_PASSWORD: pass) are standard documentation placeholders.
[SAFE]: Referenced external security tools (Trivy, Docker Scout) are well-known industry standards for container vulnerability scanning.

docker-containerization