Audit Dockerfiles and Compose manifests for security and reliability issues.
npx skills add https://github.com/ragnarok22/agent-skills --skill docker-doctor
Please help me install this Agent Skill. Skill: docker-doctor Source: https://github.com/ragnarok22/agent-skills/tree/main/skills/docker-doctor Command: npx skills add https://github.com/ragnarok22/agent-skills --skill docker-doctor
This Skill helps ensure your Docker configurations are secure, reliable, and optimized by automatically auditing Dockerfiles and Docker Compose manifests.
docker-compose.yml file, preventing potential breaches or runtime failures.Use the docker-doctor skill to verify the Dockerfile in the current directory.
High-intent search queries and answers about installing and using this skill.
You can audit a Dockerfile for security vulnerabilities by running automated checks that identify privileged containers, exposed Docker sockets, and mutable base images to produce a prioritized remediation list.
Common Docker Compose reliability risks include missing restart policies, absent healthchecks, and build context issues, which can be detected by validating the manifest configuration.
Yes, you can use hadolint alongside configuration validation to flag optimization opportunities like missing cache cleanup and multi-stage build potential to improve Dockerfile build performance.
Yes, running docker compose config -q works for pre-deploy validation by silently checking manifest syntax and configuration correctness to catch failures before runtime.
You get a quantitative health score for container configurations by executing deterministic audit scripts that evaluate security, reliability, and optimization rules to generate a 0-100 rating.
The best way to harden Docker configurations against breaches is to perform a comprehensive audit that identifies security misconfigurations and provides prioritized remediation actions for container hardening.
CloudyWingOptimize Dockerfiles and Compose files for secure, cache-friendly images.
CleanExpoAudit Node.js and TypeScript codebases for dependencies, type errors, and vulnerabilities.
pproencaReview bash and POSIX shell scripts for security and portability issues.
devkeniScan Docker images, audit Kubernetes clusters, and monitor container runtimes for security weaknesses.