docker-development

45 / 100 · High risk

Only if you trust the author. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By mmtaee/ocserv-dashboard (GitHub) · devops · 278 stars · scanned at commit e8b2509

Use when working with ANY Docker task: writing Dockerfiles, configuring docker-compose/compose.yml, multi-stage builds, docker-bake.hcl, container security audits, .dockerignore optimization, or CI/CD container testing. Triggers on: Dockerfile, docker-compose, container, image build, multi-stage, docker bake, compose.

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: …, cdnjs.cloudflare.com, dhi.io, hub.docker.com, harbor.example.com

The author does not mention this. Expected for a devops skill.

Found in 12 places.

.agents/skills/docker-development/SKILL.md, line 44CMD wget -qO- http://localhost:3000/health || exit 1
.agents/skills/docker-development/references/ci-testing.md, line 64CI runners (especially internal/self-hosted) often have **no outbound internet**. An image that fetches something at *runtime* (`page.add_script_tag(url="https:
.agents/skills/docker-development/references/ci-testing.md, line 73&& curl -sSfL https://cdnjs.cloudflare.com/ajax/libs/axe-core/4.9.1/axe.min.js \

Show 9 more

.agents/skills/docker-development/references/ci-testing.md, line 177- **Host-port collisions mislead.** If the published port (`-p HOST:CONTAINER`) is already taken by another container, `docker run -d` leaves the new container
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 12curl -s -o /dev/null -w '%{http_code}\n' https://dhi.io/v2/mariadb/tags/list # 401
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 13curl -s -o /dev/null -w '%{http_code}\n' https://dhi.io/v2/phpmyadmin/tags/list # 401
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 21curl -sI https://dhi.io/v2/mariadb/tags/list | grep -i www-authenticate
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 25tok=$(curl -s -H "Authorization: Basic $AUTH" \
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 28curl -s -o /dev/null -w '%{http_code}\n' \
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 59curl -s "https://hub.docker.com/v2/repositories/library/<image>/tags?page_size=10&ordering=last_updated" \
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 105curl -s -u "$USER:$TOKEN" https://harbor.example.com/api/v2.0/users/current \
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 107curl -s -u "$USER:$TOKEN" "https://harbor.example.com/api/v2.0/projects/<id>/members" \

Downloads and installs other software

The author does not mention this. Expected for a devops skill.

Found in 7 places.

.agents/skills/docker-development/SKILL.md, line 67apt-get install -y --no-install-recommends curl && \
.agents/skills/docker-development/checkpoints.yaml, line 192pattern: "! grep -q 'apt-get install' Dockerfile 2>/dev/null || grep -q 'rm -rf /var/lib/apt/lists' Dockerfile"
.agents/skills/docker-development/references/ci-testing.md, line 86A non-editable install in the image (`pip install .`, `npm install <tarball>`) does not behave like the editable/dev checkout your tests ran against. Classic fa

Show 4 more

.agents/skills/docker-development/references/dind-testing-patterns.md, line 186run: pip install molecule molecule-plugins[docker] ansible
.agents/skills/docker-development/references/gpg-verification.md, line 52- **Debian/Ubuntu**: `gpgv` is a **separate package** — `apt-get install gnupg`
.agents/skills/docker-development/references/gpg-verification.md, line 54`apt-get install ... gpgv`, or every call dies with a silent
.agents/skills/docker-development/references/multi-stage-caching.md, line 24- **Same-layer cleanup:** a transient `node_modules` needed only to run `npx playwright install` should be `rm -rf`'d in the *same* `RUN` (the leaf's `COPY --fr

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this. Expected for a devops skill.

Found in 2 places.

.agents/skills/docker-development/SKILL.md, line 84RUN --mount=type=secret,id=ssh_key,dst=/root/.ssh/id_rsa git clone git@github.com:org/repo.git
.agents/skills/docker-development/references/registry-catalogue-and-pin-rot.md, line 24AUTH=$(jq -r '.auths["dhi.io"].auth' ~/.docker/config.json) # never echo this

Runs commands on your computer

The author does not mention this. Expected for a devops skill.

Found in 4 places.

.agents/skills/docker-development/references/bind-mount-ownership.md, line 62sh -c 'rm -rf node_modules public/build dist'
.agents/skills/docker-development/references/ci-testing.md, line 49Unlike a test-time `--entrypoint` bypass, GitLab **runs every job's `script:` via `sh -c`**. If the image used as a job `image:` has a non-shell `ENTRYPOINT ["m
.agents/skills/docker-development/references/ci-testing.md, line 177- **Host-port collisions mislead.** If the published port (`-p HOST:CONTAINER`) is already taken by another container, `docker run -d` leaves the new container

Show 1 more

.agents/skills/docker-development/references/ci-testing.md, line 178- **Foreground apps that log to a file leave `docker logs` empty.** E.g. Tomcat started with `-fg` writes to `logs/catalina.out`, not stdout — an empty `docker

Changes files outside its own folder

The author does not mention this.

Found in 1 place.

.agents/skills/docker-development/references/ci-testing.md, line 346$ docker run --rm -v $PWD/rootfs/etc/nginx:/etc/nginx:ro nginx:alpine nginx -t

Safer alternatives

Low-risk skills in the same category (devops) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'docker-development' ] || [ -L ~/.agents/skills/'docker-development' ]; then echo 'A skill folder named docker-development already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/mmtaee/ocserv-dashboard' "$d" && git -C "$d" checkout --quiet 'e8b2509b4b820fa235503921bf6cd2c68d4caf0d' -- '.agents/skills/docker-development' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/docker-development' ~/.agents/skills/'docker-development' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'docker-development' ~/.claude/skills/'docker-development' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for mmtaee/ocserv-dashboard shows the score of its lowest-scoring skill.

SkillTrust badge for mmtaee/ocserv-dashboard

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/mmtaee/ocserv-dashboard.svg)](https://zalavijaysinh.github.io/skilltrust/repos/mmtaee/ocserv-dashboard/)

Score history

Date	Version	Score
2026-11-12	`e8b2509`	45