security-review-owasp-nodejs-docker

What problem does it solve?

This Skill helps reviewers identify security weaknesses in Node.js Docker deployments, especially issues that expand attacker reach through unsafe defaults, excess privilege, weak isolation, or risky dependency and operational choices.

Core Features & Use Cases

• Container and privilege review: Checks runtime identities, exposed management surfaces, and privilege boundaries for least-privilege gaps.
• Deployment and isolation analysis: Evaluates container, tenant, namespace, and environment boundaries that affect how securely the service runs.
• Dependency and supply-chain scrutiny: Looks for trust, pinning, provenance, update discipline, and rollback weaknesses in images, modules, and plugins.
• Use case: Use it to review a Node.js service’s Dockerfile, Kubernetes manifests, and CI/CD configuration before release to catch high-impact security flaws early.

Quick Start

Ask the skill to review your Node.js Docker deployment and report confirmed security findings, review gaps, and passed checks with evidence from the relevant code and configuration.