What problem does it solve? Container configurations often ship with security holes, bloated images, and slow builds that go unnoticed until production. This Skill reviews Dockerfiles and docker-compose files against production standards and reports findings with severity levels instead of a flat checklist. ## Core Features & Use Cases - Three-Pass Audit: Checks security (non-root runtime, leaked secrets, pinned base images), correctness (healthchecks, signal handling, restart policies, resource limits), and efficiency (multi-stage builds, layer caching, cache cleanup). - Verification Commands: Runs concrete commands like docker history, docker inspect, hadolint, and trivy to confirm image size, user configuration, and leaked secrets. - Severity-Ranked Report: Outputs blockers, should-fix items, and optimizations, each with a corrected Dockerfile or compose snippet rather than vague advice. - Use Case: Before deploying a Python API, run the audit to discover the container runs as root, the image is 1.2GB because the build stage leaked into runtime, and the compose file binds ports publicly — then apply the provided fixed snippets. ## Quick Start Ask the AI to audit the Dockerfile and docker-compose.yml in the current project for security, size, and production readiness.
