The Agent Skills Directory

[SAFE]: The skill implements and enforces security-first design principles for containerized development environments.
[SAFE]: Instructions explicitly mandate the use of official, digest-pinned base images (e.g., node:bookworm-slim@sha256:...) to prevent supply-chain attacks via image tags.
[SAFE]: Hardened configurations are promoted by default, including remoteUser: "node", --cap-drop=ALL, and no-new-privileges:true to minimize host kernel exposure.
[SAFE]: Remote data fetching for Node.js LTS detection targets the official nodejs.org domain, and the skill provides clear guidance on prioritizing local version files (.nvmrc, package.json) over external lookups.
[SAFE]: The skill includes explicit warnings against common anti-patterns such as mounting docker.sock, using --privileged mode, and including secrets in configuration files.

devcontainer-hardened