The Agent Skills Directory

[SAFE]: The skill serves as a high-quality educational resource focused on Docker security hardening. It covers essential topics such as image supply chain security, runtime isolation, and least-privilege principles.
[COMMAND_EXECUTION]: Includes instructions for standard Docker CLI commands and configuration. It provides guidance on using security-related flags like --cap-drop, --read-only, and --security-opt. It also mentions administrative commands like sudo loginctl enable-linger specifically for configuring rootless Docker, which is a legitimate security feature.
[EXTERNAL_DOWNLOADS]: The skill references reputable third-party security tools including Trivy and Snyk, and official Docker tools like Docker Scout. These are presented as recommended resources for vulnerability scanning and are standard in the industry.
[CREDENTIALS_UNSAFE]: The skill mentions sensitive patterns like sk-live- and DB_PASSWORD exclusively within an 'Anti-Patterns' section. These are used as examples to explicitly warn developers against hardcoding secrets in image layers.

docker-core-security