The Agent Skills Directory

[SAFE]: The skill promotes industry-standard security practices by including non-root user configurations (USER nonroot, USER nobody, USER appuser) in all provided Dockerfile templates, reducing the risk of privilege escalation within containers.
[SAFE]: The templates utilize minimal base images from well-known and trusted sources, such as Google Container Registry (gcr.io/distroless) and official Docker Hub Alpine/Slim images, which minimizes the container attack surface by excluding unnecessary tools and shells.
[SAFE]: The included utility script (scripts/image-size-analyzer.sh) follows secure coding practices by using proper shell variable quoting, which effectively prevents command injection vulnerabilities during image analysis.
[SAFE]: Container health checks are implemented securely using wget and urllib targeted specifically at localhost, ensuring that these checks are confined to the local container environment without exposing network services externally.

docker-multi-stage