The Agent Skills Directory

[SAFE]: The Dockerfile examples correctly implement security best practices by using multi-stage builds to reduce attack surface and configuring non-root users (USER nextjs, USER node) to run applications.
[SAFE]: The .dockerignore template correctly identifies sensitive files for exclusion, such as .env*, node_modules, and .git, preventing accidental credential exposure in image layers.
[SAFE]: The skill uses vendor-appropriate resources for examples, including the container image ghcr.io/frankxai/app:latest and the domain frankx.ai for Traefik routing rules.
[SAFE]: The Docker Compose development environment uses common placeholder credentials (user:pass) which is standard practice for local development templates.
[SAFE]: Mounting /var/run/docker.sock in the Traefik service is a standard configuration for that specific tool to enable service discovery. The skill appropriately uses the :ro (read-only) flag to limit the container's capabilities.

docker-containers