The Agent Skills Directory

[SAFE]: The skill provides educational content and templates for Dockerfile optimization based on industry standards.
[EXTERNAL_DOWNLOADS]: The skill references official and well-known Docker base images (Node.js, Python, Go, Rust, OpenJDK) and GitHub Actions from trusted providers such as Docker and Aqua Security. These are standard industry resources and do not represent a security risk.
[COMMAND_EXECUTION]: Examples include standard build and package management commands such as npm, pip, go, apk, and apt-get. These are used correctly within the context of a containerized build process to install dependencies and compile source code.
[PRIVILEGE_ESCALATION]: The instructions actively promote security hardening by recommending the creation of non-root users and the use of the USER instruction to minimize the container's attack surface. It also demonstrates how to drop unnecessary Linux capabilities.
[DYNAMIC_EXECUTION]: The HEALTHCHECK instructions utilize small inline scripts with node -e or python -c to perform status checks on localhost. These are standard practices for container health monitoring and do not involve untrusted remote execution.

dockerfile-optimizer