The Agent Skills Directory

[SAFE]: The skill provides legitimate guidance for .NET application containerization. It explicitly encourages security best practices, such as using non-root users (USER app), pinning image digests for reproducibility, and utilizing minimal 'chiseled' or distroless images to reduce the attack surface.
[EXTERNAL_DOWNLOADS]: The skill references container images from the Microsoft Container Registry (mcr.microsoft.com) and suggests GitHub Container Registry (ghcr.io) as a potential publishing target. Both are well-known and official services within the .NET and development ecosystems.
[INDIRECT_PROMPT_INJECTION]: The skill's workflow involves identifying project metadata from user-provided files to generate tailored Dockerfile configurations.
Ingestion points: Project files (.csproj) and solution files (.sln) located within the repository.
Boundary markers: The instructions focus on generating a static Dockerfile output based on identified project properties.
Capability inventory: The skill generates text and does not execute subprocesses, network operations, or file-write operations based on the content of the ingested files.
Sanitization: Standard template generation based on detected versions and project types.

dotnet-dockerfile