The Agent Skills Directory

[SAFE]: The skill consistently recommends security best practices, such as running containers as non-root users and using no-new-privileges=true to prevent privilege escalation within the container.
[SAFE]: It provides clear instructions for managing secrets safely by excluding sensitive files (like .env) via .dockerignore and utilizing environment variables or secure input methods for registry credentials rather than hardcoding them.
[SAFE]: External references and image sources are limited to official container registries (Docker Hub, AWS ECR, Scaleway) and well-known base images (Node.js, Go, Postgres, and Google Distroless).
[SAFE]: Guidance on Docker daemon configuration includes essential hardening measures such as log rotation to prevent disk exhaustion and user namespace remapping to increase host isolation.
[SAFE]: No obfuscation, prompt injection, or malicious persistence mechanisms were detected. The technical examples provided are standard diagnostic and build patterns.

docker