The Agent Skills Directory

[SAFE]: The skill implements security best practices by providing templates that create and switch to non-root users (appuser or nonroot) for production containers, mitigating risks associated with container breakout.
[SAFE]: The recommended .dockerignore configuration explicitly excludes sensitive files such as .env and .git directories, preventing accidental exposure of credentials or source control metadata in the final image.
[SAFE]: The skill utilizes official and well-known base images from established registries, and explicitly advises pinning specific versions rather than using the latest tag to ensure build reproducibility and supply chain integrity.
[SAFE]: Validation steps include explicit checks for secrets baked into the image, reinforcing secure development habits.
[SAFE]: Dependency management instructions (e.g., npm ci, pip install --no-cache-dir) follow industry standards for clean and efficient container builds.

create-dockerfile