The Agent Skills Directory

[SAFE]: The skill is primarily educational, providing templates and guides for implementing container security. It explicitly promotes hardening techniques including multi-stage builds, read-only filesystems, and dropping capabilities.
[COMMAND_EXECUTION]: Provides an example shell script for security scanning that uses docker run to mount the Docker socket (/var/run/docker.sock). This is the standard operational mode for the docker-bench-security tool referenced in the example and is appropriate for its stated purpose.
[CREDENTIALS_UNSAFE]: Includes placeholder credentials (e.g., user:pass) in the Docker Compose example. These are generic markers for documentation purposes and do not contain hardcoded secrets.

containers