The Agent Skills Directory

[SAFE]: The skill serves as a guide and template repository for Docker deployments on Render. It correctly identifies and promotes industry-standard security practices, including the use of multi-stage builds to minimize image size and attack surface, and the implementation of non-root user execution within containers.
[CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were found in the skill files. The documentation provides explicit warnings against including secrets in Docker build arguments (ARG) and correctly directs users toward Render's environment variables and BuildKit secret mounts for secure handling.
[EXTERNAL_DOWNLOADS]: The provided templates reference well-known, official base images from Docker Hub and GitHub Container Registry. Dependency installation commands (e.g., npm ci, pip install) target official package registries. All external references are appropriate for the skill's stated purpose.
[COMMAND_EXECUTION]: The command patterns provided in the Dockerfile templates (such as RUN and CMD instructions) are standard for container builds and runtime execution. There are no suspicious or hidden commands, and the instructions emphasize using exec for proper signal handling.

render-docker