Works with the AI tools you already use
Dockerfile & Container Build Sanity Gate
The Dockerfile & Container Build Sanity Gate is an adversarial reviewer for Dockerfiles and container build files.
Free
See it in action
You say
Review this Dockerfile: FROM node:latest COPY . . RUN npm install && npm run build ENV API_TOKEN=sk-live-abc123 CMD ["node", "server.js"]
Your agent does
VERDICT: BLOCK PRIVILEGE: risk - no USER directive, so the container runs as root. SIZE: bloated - single stage leaves npm and build tools in the final image. LAYERS: fragile - FROM node:latest is unpinned; COPY . . before install busts the cache on every code change. SECRETS: API_TOKEN in ENV is baked into a layer and visible to anyone who pulls the image - highest risk. HARDENING: no .dockerignore, no HEALTHCHECK, packages not minimized. TOP 3 FIXES: remove API_TOKEN from ENV and pass it at runtime; pin the base image and move COPY after dependency install; add a non-root USER plus a multi-stage build.
About this skill
The Dockerfile & Container Build Sanity Gate is an adversarial reviewer for Dockerfiles and container build files. You paste a Dockerfile and it reads it the way a security-minded platform engineer would in code review — then returns a structured verdict. It does not rewrite your Dockerfile or generate one.
It runs five passes — privilege and user, image size and bloat, layer order and pinning, secret and data leakage, and hardening best practices — and returns a structured PASS / FIX / BLOCK verdict with the highest-impact fixes first. It is built to be the last read before an image is built or pushed, when the author is too close to the file to spot a root process, a baked-in token, or a cache-busting layer.
How to install
Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Free forever
No account required to browse
Trust & safety
Security scanned
Verified clean 2 months ago
- Free to download with an account
Frequently Asked Questions
Popular in Security & Compliance
Bounty Security Pattern Master Library — 399 Vulnerability Patterns
A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.
sast-configuration
Automate the setup and optimization of Semgrep, SonarQube, and CodeQL for high-signal security testing.
dockerfile-hardener
A security auditor that identifies Docker vulnerabilities, scores configurations, and generates hardened replacements.
Dependency Upgrade Planner
Safe dependency upgrade plans: changelog-aware risk scoring, test hints, and rollback paths.