← All skills
dockerfile-validator
67 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By akin-ozer/cc-devops-skills (GitHub) · security · 337 stars · scanned at commit 276af75
Validate, lint, audit, or scan a Dockerfile for security and best practices.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 15 places.
Show 12 more
- devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 75
sed -n '220,440p' "$TARGET_DOCKERFILE" - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 83
bash "$SKILL_DIR/scripts/dockerfile-validate.sh" "$TARGET_DOCKERFILE" - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 89
bash "$SKILL_DIR/scripts/dockerfile-validate.sh" "$TARGET_DOCKERFILE" | tee /tmp/dockerfile-validator.out - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 137
sed -n '1,220p' "$SKILL_DIR/references/security_checklist.md" - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 145
rg -n "USER|secrets|EXPOSE|HEALTHCHECK" "$SKILL_DIR/references/security_checklist.md" - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 203
DOCKERFILE_DIR="$(dirname "$TARGET_DOCKERFILE")" - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 220
docker run --rm -i hadolint/hadolint < "$TARGET_DOCKERFILE" - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 232
cd /path/to/repo - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 239
cd /path/to/repo - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 246
cd /path/to/repo/devops-skills-plugin/skills/dockerfile-validator - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 254
cd /path/to/repo - devops-skills-plugin/skills/dockerfile-validator/SKILL.md, line 261
STRICT_SHELLCHECK=true bash devops-skills-plugin/skills/dockerfile-validator/scripts/test_validate.sh
Downloads and installs other software
The author does not mention this.
Found in 30 places.
Show 17 more
- devops-skills-plugin/skills/dockerfile-validator/examples/bad-example.Dockerfile, line 24
RUN pip install flask - devops-skills-plugin/skills/dockerfile-validator/examples/python-optimized.Dockerfile, line 13
RUN apt-get update && apt-get install -y --no-install-recommends \ - devops-skills-plugin/skills/dockerfile-validator/examples/python-optimized.Dockerfile, line 22
pip install --user --no-cache-dir -r requirements.txt - devops-skills-plugin/skills/dockerfile-validator/examples/security-issues.Dockerfile, line 17
RUN apt-get update && apt-get install -y \ - devops-skills-plugin/skills/dockerfile-validator/examples/security-issues.Dockerfile, line 31
RUN pip install flask requests sqlalchemy - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 58
RUN apt-get install -y curl - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 59
RUN apt-get install -y vim - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 60
RUN curl -sL https://example.com/script.sh | bash - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 63
RUN apt-get update && apt-get install -y --no-install-recommends \ - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 67
&& curl -sL https://example.com/script.sh | bash - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 73
RUN apt-get update && apt-get install -y \ - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 84
RUN apt-get install -y --no-install-recommends package - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 90
RUN apt-get install -y package=1.2.3-1 - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 96
RUN pip install package==1.2.3 - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 101
RUN apt-get update && apt-get install -y \ - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 267
pip install -r requirements.txt - devops-skills-plugin/skills/dockerfile-validator/references/docker_best_practices.md, line 321
RUN apt-get update && apt-get install -y package
and 10 more places
Sends data to these websites: example.com
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 11 places.
Show 8 more
Reads your saved credentials, such as SSH keys or .env files
This is disclosed by the author in the skill's SKILL.md or README.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'dockerfile-validator' ] || [ -L ~/.agents/skills/'dockerfile-validator' ]; then echo 'A skill folder named dockerfile-validator already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/akin-ozer/cc-devops-skills' "$d" && git -C "$d" checkout --quiet '276af751e659315aaf56d3ad13d7c26f4e72e28a' -- 'devops-skills-plugin/skills/dockerfile-validator' && mkdir -p ~/.agents/skills && cp -R "$d"/'devops-skills-plugin/skills/dockerfile-validator' ~/.agents/skills/'dockerfile-validator' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'dockerfile-validator' ~/.claude/skills/'dockerfile-validator' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for akin-ozer/cc-devops-skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/akin-ozer/cc-devops-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 276af75 | 100 |
| 2026-11-06 | 276af75 | 67 |