security-review-owasp-docker-security

What problem does it solve?

This Skill helps reviewers find Docker security weaknesses before they become environment-wide compromise paths, tenant escape risks, or unsafe deployment assumptions.

Core Features & Use Cases

• Privilege and boundary review: Checks container, process, node, and management-plane privileges for unsafe defaults and excessive access.
• Configuration and isolation analysis: Examines runtime settings, tenancy boundaries, secret handling, and deployment hardening across code and manifests.
• Dependency and operations assessment: Reviews images, plugins, pipelines, monitoring, scanning, and rollback safeguards for trust and exposure issues.
• Use case: A reviewer can use this skill to inspect a Dockerized service, validate whether exposed admin surfaces or privileged runtime paths are justified, and document confirmed findings with evidence.

Quick Start

Ask the skill to review the Docker-related code, manifests, and operational controls for confirmed security weaknesses and evidence-based remediation.