The Agent Skills Directory

[SAFE]: The skill focuses entirely on providing defensive security configurations for Docker environments. It correctly identifies common pitfalls like running as root, using the privileged flag, or hardcoding secrets, and provides standard remediation techniques.
[SAFE]: Recommended external tools (Trivy, Snyk, Docker Scout) are well-known, industry-standard security scanners. The references point to official Docker documentation.
[SAFE]: The execution environment defined in the workflow and MCP tools uses standard Docker API calls for auditing purposes (inspecting containers, listing networks) to verify security posture.
[SAFE]: Secret handling instructions follow security best practices, advocating for BuildKit secret mounts and Docker secrets instead of environment variables or image layers.

docker-security