1 skill for Docker
Review a Dockerfile or Compose file for root runtime, latest tags, secrets in layers, and the Docker socket. Use for a Docker security review. Do not use for a non-container change or to mount the Docker socket into an app container.
# Docker Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/docker-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Docker Security Review Skill for Copilot
Copilot skill `docker-security-review` for Docker. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Dockerfile, a Compose file, or a request to "check the image".
## When to leave it
Do not upgrade dependencies or the framework version unless th...