The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The validation script scripts/dockerfile-validate.sh identifies missing dependencies and automatically installs hadolint-bin and checkov from PyPI. These are well-known, reputable tools used for the skill's primary purpose of security auditing.
[COMMAND_EXECUTION]: The script executes shell commands and subprocesses to run the linters and perform custom pattern matching (via grep and awk) on Dockerfiles. It implements a robust cleanup mechanism using bash traps to ensure all temporary virtual environments and files are deleted on exit.
[REMOTE_CODE_EXECUTION]: The documentation references official installation methods from GitHub for hadolint. While it contains an example of piping a remote script to bash in the references/docker_best_practices.md file, this is provided as a structural example of command chaining rather than an active automated process.
[DATA_EXFILTRATION]: No evidence of unauthorized data access or external transmission was found. The script includes logic specifically designed to detect and flag hardcoded secrets in user-provided Dockerfiles.

dockerfile-validator