What it does

This skill provides a comprehensive security and reliability audit for Docker Compose configurations. It scans docker-compose.yml and compose.yaml files to detect misconfigurations that lead to security vulnerabilities, performance bottlenecks, and deployment failures.

Why use this skill

Manual review of infrastructure-as-code is error-prone. This skill automates a 14-point quality gate that is more rigorous than standard YAML validation. While basic AI prompts might catch syntax errors, this skill enforces industry best practices like non-root execution, resource capping, image pinning, and network isolation that are often overlooked by developers focused on "just making it work."

What it covers

• Security Audit: Detects hardcoded secrets, privileged mode, dangerous capabilities, and exposed database ports.
• Reliability: Validates healthchecks, restart policies, and ensures resource limits are defined to prevent host exhaustion.
• Architecture: Recommends internal networking for backend services and image pinning to specific tags (no :latest).
• Modern Standards: Flags deprecated version fields and recommends service_healthy conditions for dependencies.

Output Format

The skill generates a categorized report with 🔴 CRITICAL, 🟡 WARNING, and ✅ PASS indicators, providing line-specific locations and clear remediation steps for every finding.