What problem does it solve? Container configurations often ship with security holes, bloated images, and slow builds that go unnoticed until production incidents occur. This Skill reviews Dockerfiles and docker-compose files against production standards and reports findings by severity instead of a flat checklist. ## Core Features & Use Cases - Three-pass audit: Security pass (non-root runtime, secret leaks, pinned base images), correctness pass (healthchecks, signal handling, restart policies, resource limits), and efficiency pass (multi-stage builds, layer caching, cache cleanup). - Verification commands: Runnable commands such as docker history, docker inspect, hadolint, and trivy to confirm image size, user configuration, leaked secrets, and compose validity. - Severity-ranked report: Output template separates blockers, should-fix items, and optimizations, with every finding including a corrected Dockerfile or compose snippet. - Use Case: Before deploying a Python API, run the audit to discover the container runs as root, the image is 1.2GB because the build stage leaked into runtime, and the healthcheck only tests process liveness — then apply the provided fixes. ## Quick Start Audit the Dockerfile and docker-compose.yml in this project for security, size, and production readiness issues.
