The Agent Skills Directory

[SAFE]: The skill provides hardened Dockerfile patterns, specifically demonstrating multi-stage builds to minimize image size and attack surface.
[SAFE]: Promotes running containers as a non-root user by including user creation and the USER directive in its production Dockerfile example.
[SAFE]: Includes a dedicated security checklist recommending critical configurations such as no-new-privileges, read_only filesystems, and cap_drop to implement the principle of least privilege.
[SAFE]: Demonstrates network isolation strategies using Docker Compose to ensure sensitive services like databases are only reachable via internal backend networks.
[SAFE]: Mentions the Datadog Agent, a well-known monitoring service, as part of the operational guidance for Raspberry Pi deployments.

docker-patterns