Dockerfile Hardener
A security auditor that identifies Docker vulnerabilities, scores configurations, and generates hardened replacements.
Free
Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
GitHub Copilot
Gemini CLI+20 moreClaude CodeCursorCodex CLIGitHub CopilotGemini CLI
OpenClaw
Manus
Grok+17 agentsdockerfile-hardener
Example session with this skill installed
Audit this Dockerfile for security: FROM node:latest\nCOPY . /app\nRUN npm install\nCMD ["node", "index.js"]
- Read your context and instructions
- Compiled the dockerfile-hardener
Score: 35/100 (Grade: F)
Findings
- [CRITICAL] Running as Root: No USER defined.
- [CRITICAL] Privileged Base Image: Using 'latest' tag.
- [MEDIUM] No Multi-Stage Build: Build tools in runtime.
Remediation: Use node:20-alpine and add 'USER node'.
Connects securely to your tools. The creator never sees your data.
About this skill
What it does
The Dockerfile Hardener is a specialized security auditor designed to analyze container configurations for vulnerabilities, anti-patterns, and compliance issues. It performs a deep-dive scan into image selection, layer optimization, secret handling, and runtime hardening parameters.
Why use this skill
Vulnerable Docker images are a primary entry point for container escapes and supply chain attacks. Standard prompting often fails to catch subtle issues like SUID binaries, cache-busting anti-patterns, or unpinned dependencies. This skill uses a rigorous, multi-point scoring system to evaluate your Dockerfile against industry-standard hardening benchmarks.
What you get
- Security Audit Report: A detailed breakdown of CRITICAL to LOW severity findings with line numbers and specific remediation steps.
- Hardening Score: A letter grade (A-F) based on a 100-point security assessment.
- Refactored Dockerfile: A fully rewritten, production-ready replacement utilizing multi-stage builds, non-root users, and BuildKit optimizations.
- CI/CD Snippets: Ready-to-use configurations for GitHub Actions and GitLab CI.
Supported Protocols & Tools
The skill follows OCI standards and supports standard Dockerfiles, OCI-compliant images, and integrations with linters like Hadolint. It covers ecosystems including Node.js, Python, Go, and Java via Alpine, Distroless, and Debian-slim base images.
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
4 installs
Downloaded by developers to date
Free forever
No account required to browse
Trust & safety
Security scanned
Verified clean 3 months ago
- Free to download with an account