The Agent Skills Directory

[SAFE]: The skill serves as a guideline for devops practices. It promotes security-hardening techniques such as using non-root users, multi-stage builds to minimize attack surfaces, and secure secret handling using BuildKit mounts.\n- [EXTERNAL_DOWNLOADS]: The examples reference well-known and official base images from Docker Hub (node:22-bookworm-slim) and Google Container Registry (gcr.io/distroless), which are considered trusted sources.\n- [COMMAND_EXECUTION]: The provided Dockerfile examples use standard build commands (npm ci, npm run build). These are within the expected context of building containerized applications.\n- [CREDENTIALS_UNSAFE]: The skill correctly identifies the risks of using build arguments for secrets and demonstrates the use of secure secret mounts as a mitigation. No hardcoded credentials or sensitive file exposures were found.

containers