auditing

What problem does it solve?

This Skill automates the auditing of Dockerfiles and docker-compose.yml files, ensuring they adhere to security, performance, and production readiness best practices.

Core Features & Use Cases

• Comprehensive Auditing: Checks for security vulnerabilities (e.g., non-root users, secrets in ENV), performance optimizations (e.g., multi-stage builds, cache mounts), and production readiness (e.g., HEALTHCHECK, restart policies).
• Agent-Assisted Review: Dispatches a dedicated dockerfile-reviewer agent for in-depth analysis of Dockerfiles.
• Automated Fixes: Offers options to automatically fix identified issues based on severity.
• Use Case: Before deploying a new microservice, run this Skill to ensure its Docker configuration is secure, efficient, and ready for a production environment.

Quick Start

Run the auditing skill to check the Dockerfile and docker-compose.yml in the current directory.