[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ETSC9GAPFN86XC9PRXVER5":3,"skill-same:01M6ETSC9GAPFN86XC9PRXVER5":125},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":47,"linkOnly":48,"markdownContent":49,"markdownBody":50,"frontMatter":51,"refName":68,"commitSha":69,"skillDirectory":70,"forksCount":14,"repositoryHtmlUrl":71,"repositoryHomepageUrl":72,"ownerHtmlUrl":73,"ownerBlogUrl":6,"ownerDescription":74,"updatedAt":75,"install":76,"resources":89},"01M6ETSC9GAPFN86XC9PRXVER5","hardening-docker-containers-for-production",null,"Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas","henriquescastilho\u002Fmy-claude","henriquescastilho","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F153296945?v=4","01M6ESH7EXPXTH9CVQ4K16SRG8","Henrique Scheer","01M6ESH7JHEK2PTNNH4HEH787Z",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000011","运维与部署","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46],"docker","containers","hardening","Production","hardening docker containers for production","with","de","id","enforce","cm","cis","container","PS","escalation","cis-benchmark","container-security","best practices","benchmark","pr","cybersecurity","2026-11-10 10:12:30",false,"---\nname: hardening-docker-containers-for-production\ndescription: Hardening Docker containers for production involves applying security\n  best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface,\n  prevent privilege escalation, and enforce leas\ndomain: cybersecurity\nsubdomain: container-security\ntags:\n- containers\n- docker\n- security\n- hardening\n- CIS-benchmark\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- PR.IR-01\n- ID.AM-08\n- DE.CM-01\nmitre_attack:\n- T1610\n- T1611\n- T1609\n- T1525\n- T1068\n---\n# Hardening Docker Containers for Production\n\n## Overview\n\nHardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce least-privilege principles across Docker daemon, images, containers, and runtime configurations.\n\n\n## When to Use\n\n- When deploying or configuring hardening docker containers for production capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Docker Engine 24.0+ installed\n- Docker Compose v2\n- Linux host with kernel 5.10+\n- Root or sudo access on Docker host\n- docker-bench-security tool\n- Hadolint for Dockerfile linting\n- Dockle for image linting\n\n## Core Concepts\n\n### CIS Docker Benchmark Sections\n\n1. **Host Configuration** - Audit Docker daemon files, restrict access to \u002Fvar\u002Frun\u002Fdocker.sock\n2. **Docker Daemon Configuration** - Enable TLS, restrict inter-container communication, configure logging\n3. **Docker Daemon Configuration Files** - Set ownership and permissions on daemon.json\n4. **Container Images and Build File** - Use trusted base images, scan for vulnerabilities, multi-stage builds\n5. **Container Runtime** - Drop capabilities, read-only rootfs, restrict syscalls\n6. **Docker Security Operations** - Monitor, audit, and rotate credentials\n\n### Key Hardening Principles\n\n- **Least Privilege**: Run containers as non-root, drop all capabilities except required\n- **Immutability**: Use read-only root filesystem, tmpfs for writable directories\n- **Minimalism**: Use distroless or Alpine base images, multi-stage builds\n- **Isolation**: Apply seccomp profiles, AppArmor\u002FSELinux, namespace restrictions\n- **Auditability**: Enable content trust, log all container activity\n\n## Workflow\n\n### Step 1: Harden the Dockerfile\n\n```dockerfile\n# Use specific digest for reproducibility\nFROM python:3.12-slim@sha256:abc123... AS builder\n\nWORKDIR \u002Fapp\nCOPY requirements.txt .\nRUN pip install --no-cache-dir --user -r requirements.txt\n\n# Production stage - minimal image\nFROM gcr.io\u002Fdistroless\u002Fpython3-debian12\n\n# Copy only necessary artifacts\nCOPY --from=builder \u002Froot\u002F.local \u002Froot\u002F.local\nCOPY --from=builder \u002Fapp \u002Fapp\n\nWORKDIR \u002Fapp\n\n# Create non-root user\nUSER 65534:65534\n\n# Set read-only filesystem expectation\nLABEL org.opencontainers.image.source=\"https:\u002F\u002Fgithub.com\u002Forg\u002Fapp\"\n\nENTRYPOINT [\"python\", \"app.py\"]\n```\n\n### Step 2: Harden Docker Daemon Configuration\n\n```json\n{\n  \"icc\": false,\n  \"log-driver\": \"json-file\",\n  \"log-opts\": {\n    \"max-size\": \"10m\",\n    \"max-file\": \"3\"\n  },\n  \"live-restore\": true,\n  \"userland-proxy\": false,\n  \"no-new-privileges\": true,\n  \"default-ulimits\": {\n    \"nofile\": {\n      \"Name\": \"nofile\",\n      \"Hard\": 64000,\n      \"Soft\": 64000\n    },\n    \"nproc\": {\n      \"Name\": \"nproc\",\n      \"Hard\": 1024,\n      \"Soft\": 1024\n    }\n  },\n  \"seccomp-profile\": \"\u002Fetc\u002Fdocker\u002Fseccomp-default.json\",\n  \"tls\": true,\n  \"tlscacert\": \"\u002Fetc\u002Fdocker\u002Ftls\u002Fca.pem\",\n  \"tlscert\": \"\u002Fetc\u002Fdocker\u002Ftls\u002Fserver-cert.pem\",\n  \"tlskey\": \"\u002Fetc\u002Fdocker\u002Ftls\u002Fserver-key.pem\",\n  \"tlsverify\": true\n}\n```\n\n### Step 3: Harden Container Runtime\n\n```bash\ndocker run -d \\\n  --name production-app \\\n  --read-only \\\n  --tmpfs \u002Ftmp:rw,noexec,nosuid,size=100m \\\n  --tmpfs \u002Fvar\u002Frun:rw,noexec,nosuid,size=10m \\\n  --cap-drop ALL \\\n  --cap-add NET_BIND_SERVICE \\\n  --security-opt no-new-privileges:true \\\n  --security-opt seccomp=\u002Fetc\u002Fdocker\u002Fseccomp-default.json \\\n  --security-opt apparmor=docker-default \\\n  --pids-limit 100 \\\n  --memory 512m \\\n  --memory-swap 512m \\\n  --cpus 1.0 \\\n  --user 65534:65534 \\\n  --network custom-bridge \\\n  --restart on-failure:3 \\\n  --health-cmd \"curl -f http:\u002F\u002Flocalhost:8080\u002Fhealth || exit 1\" \\\n  --health-interval 30s \\\n  --health-timeout 10s \\\n  --health-retries 3 \\\n  myapp:latest\n```\n\n### Step 4: Enable Docker Content Trust\n\n```bash\nexport DOCKER_CONTENT_TRUST=1\nexport DOCKER_CONTENT_TRUST_SERVER=https:\u002F\u002Fnotary.example.com\n\n# Sign and push image\ndocker trust sign myregistry.com\u002Fmyapp:v1.0.0\n\n# Verify image signature before pull\ndocker trust inspect --pretty myregistry.com\u002Fmyapp:v1.0.0\n```\n\n### Step 5: Configure Host-Level Auditing\n\n```bash\n# Add audit rules for Docker files and directories\ncat >> \u002Fetc\u002Faudit\u002Frules.d\u002Fdocker.rules \u003C\u003C 'EOF'\n-w \u002Fusr\u002Fbin\u002Fdocker -k docker\n-w \u002Fvar\u002Flib\u002Fdocker -k docker\n-w \u002Fetc\u002Fdocker -k docker\n-w \u002Flib\u002Fsystemd\u002Fsystem\u002Fdocker.service -k docker\n-w \u002Flib\u002Fsystemd\u002Fsystem\u002Fdocker.socket -k docker\n-w \u002Fetc\u002Fdefault\u002Fdocker -k docker\n-w \u002Fetc\u002Fdocker\u002Fdaemon.json -k docker\n-w \u002Fusr\u002Fbin\u002Fcontainerd -k docker\n-w \u002Fusr\u002Fbin\u002Frunc -k docker\nEOF\n\nsystemctl restart auditd\n```\n\n## Validation Commands\n\n```bash\n# Run Docker Bench Security\ndocker run --rm --net host --pid host \\\n  --userns host --cap-add audit_control \\\n  -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \\\n  -v \u002Fetc:\u002Fetc:ro \\\n  -v \u002Fusr\u002Fbin\u002Fcontainerd:\u002Fusr\u002Fbin\u002Fcontainerd:ro \\\n  -v \u002Fusr\u002Fbin\u002Frunc:\u002Fusr\u002Fbin\u002Frunc:ro \\\n  -v \u002Fusr\u002Flib\u002Fsystemd:\u002Fusr\u002Flib\u002Fsystemd:ro \\\n  -v \u002Fvar\u002Flib:\u002Fvar\u002Flib:ro \\\n  -v \u002Fvar\u002Frun\u002Fdocker.sock:\u002Fvar\u002Frun\u002Fdocker.sock:ro \\\n  docker\u002Fdocker-bench-security\n\n# Lint Dockerfile\nhadolint Dockerfile\n\n# Lint built image\ndockle myapp:latest\n\n# Verify no containers running as root\ndocker ps -q | xargs docker inspect --format '{{.Id}}: User={{.Config.User}}'\n```\n\n## Key Security Controls\n\n| Control | Implementation | CIS Section |\n|---------|---------------|-------------|\n| Non-root user | USER instruction in Dockerfile | 4.1 |\n| Read-only rootfs | --read-only flag | 5.12 |\n| Drop capabilities | --cap-drop ALL | 5.3 |\n| Resource limits | --memory, --cpus, --pids-limit | 5.10 |\n| No new privileges | --security-opt no-new-privileges | 5.25 |\n| Content trust | DOCKER_CONTENT_TRUST=1 | 4.5 |\n| TLS for daemon | daemon.json TLS config | 2.6 |\n| Audit logging | auditd rules | 1.1 |\n\n## References\n\n- [CIS Docker Benchmark](https:\u002F\u002Fwww.cisecurity.org\u002Fbenchmark\u002Fdocker)\n- [Docker Security Best Practices](https:\u002F\u002Fdocs.docker.com\u002Fengine\u002Fsecurity\u002F)\n- [Docker Bench Security Tool](https:\u002F\u002Fgithub.com\u002Fdocker\u002Fdocker-bench-security)\n- [Hadolint - Dockerfile Linter](https:\u002F\u002Fgithub.com\u002Fhadolint\u002Fhadolint)\n","# Hardening Docker Containers for Production\n\n## Overview\n\nHardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce least-privilege principles across Docker daemon, images, containers, and runtime configurations.\n\n\n## When to Use\n\n- When deploying or configuring hardening docker containers for production capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n\n- Docker Engine 24.0+ installed\n- Docker Compose v2\n- Linux host with kernel 5.10+\n- Root or sudo access on Docker host\n- docker-bench-security tool\n- Hadolint for Dockerfile linting\n- Dockle for image linting\n\n## Core Concepts\n\n### CIS Docker Benchmark Sections\n\n1. **Host Configuration** - Audit Docker daemon files, restrict access to \u002Fvar\u002Frun\u002Fdocker.sock\n2. **Docker Daemon Configuration** - Enable TLS, restrict inter-container communication, configure logging\n3. **Docker Daemon Configuration Files** - Set ownership and permissions on daemon.json\n4. **Container Images and Build File** - Use trusted base images, scan for vulnerabilities, multi-stage builds\n5. **Container Runtime** - Drop capabilities, read-only rootfs, restrict syscalls\n6. **Docker Security Operations** - Monitor, audit, and rotate credentials\n\n### Key Hardening Principles\n\n- **Least Privilege**: Run containers as non-root, drop all capabilities except required\n- **Immutability**: Use read-only root filesystem, tmpfs for writable directories\n- **Minimalism**: Use distroless or Alpine base images, multi-stage builds\n- **Isolation**: Apply seccomp profiles, AppArmor\u002FSELinux, namespace restrictions\n- **Auditability**: Enable content trust, log all container activity\n\n## Workflow\n\n### Step 1: Harden the Dockerfile\n\n```dockerfile\n# Use specific digest for reproducibility\nFROM python:3.12-slim@sha256:abc123... AS builder\n\nWORKDIR \u002Fapp\nCOPY requirements.txt .\nRUN pip install --no-cache-dir --user -r requirements.txt\n\n# Production stage - minimal image\nFROM gcr.io\u002Fdistroless\u002Fpython3-debian12\n\n# Copy only necessary artifacts\nCOPY --from=builder \u002Froot\u002F.local \u002Froot\u002F.local\nCOPY --from=builder \u002Fapp \u002Fapp\n\nWORKDIR \u002Fapp\n\n# Create non-root user\nUSER 65534:65534\n\n# Set read-only filesystem expectation\nLABEL org.opencontainers.image.source=\"https:\u002F\u002Fgithub.com\u002Forg\u002Fapp\"\n\nENTRYPOINT [\"python\", \"app.py\"]\n```\n\n### Step 2: Harden Docker Daemon Configuration\n\n```json\n{\n  \"icc\": false,\n  \"log-driver\": \"json-file\",\n  \"log-opts\": {\n    \"max-size\": \"10m\",\n    \"max-file\": \"3\"\n  },\n  \"live-restore\": true,\n  \"userland-proxy\": false,\n  \"no-new-privileges\": true,\n  \"default-ulimits\": {\n    \"nofile\": {\n      \"Name\": \"nofile\",\n      \"Hard\": 64000,\n      \"Soft\": 64000\n    },\n    \"nproc\": {\n      \"Name\": \"nproc\",\n      \"Hard\": 1024,\n      \"Soft\": 1024\n    }\n  },\n  \"seccomp-profile\": \"\u002Fetc\u002Fdocker\u002Fseccomp-default.json\",\n  \"tls\": true,\n  \"tlscacert\": \"\u002Fetc\u002Fdocker\u002Ftls\u002Fca.pem\",\n  \"tlscert\": \"\u002Fetc\u002Fdocker\u002Ftls\u002Fserver-cert.pem\",\n  \"tlskey\": \"\u002Fetc\u002Fdocker\u002Ftls\u002Fserver-key.pem\",\n  \"tlsverify\": true\n}\n```\n\n### Step 3: Harden Container Runtime\n\n```bash\ndocker run -d \\\n  --name production-app \\\n  --read-only \\\n  --tmpfs \u002Ftmp:rw,noexec,nosuid,size=100m \\\n  --tmpfs \u002Fvar\u002Frun:rw,noexec,nosuid,size=10m \\\n  --cap-drop ALL \\\n  --cap-add NET_BIND_SERVICE \\\n  --security-opt no-new-privileges:true \\\n  --security-opt seccomp=\u002Fetc\u002Fdocker\u002Fseccomp-default.json \\\n  --security-opt apparmor=docker-default \\\n  --pids-limit 100 \\\n  --memory 512m \\\n  --memory-swap 512m \\\n  --cpus 1.0 \\\n  --user 65534:65534 \\\n  --network custom-bridge \\\n  --restart on-failure:3 \\\n  --health-cmd \"curl -f http:\u002F\u002Flocalhost:8080\u002Fhealth || exit 1\" \\\n  --health-interval 30s \\\n  --health-timeout 10s \\\n  --health-retries 3 \\\n  myapp:latest\n```\n\n### Step 4: Enable Docker Content Trust\n\n```bash\nexport DOCKER_CONTENT_TRUST=1\nexport DOCKER_CONTENT_TRUST_SERVER=https:\u002F\u002Fnotary.example.com\n\n# Sign and push image\ndocker trust sign myregistry.com\u002Fmyapp:v1.0.0\n\n# Verify image signature before pull\ndocker trust inspect --pretty myregistry.com\u002Fmyapp:v1.0.0\n```\n\n### Step 5: Configure Host-Level Auditing\n\n```bash\n# Add audit rules for Docker files and directories\ncat >> \u002Fetc\u002Faudit\u002Frules.d\u002Fdocker.rules \u003C\u003C 'EOF'\n-w \u002Fusr\u002Fbin\u002Fdocker -k docker\n-w \u002Fvar\u002Flib\u002Fdocker -k docker\n-w \u002Fetc\u002Fdocker -k docker\n-w \u002Flib\u002Fsystemd\u002Fsystem\u002Fdocker.service -k docker\n-w \u002Flib\u002Fsystemd\u002Fsystem\u002Fdocker.socket -k docker\n-w \u002Fetc\u002Fdefault\u002Fdocker -k docker\n-w \u002Fetc\u002Fdocker\u002Fdaemon.json -k docker\n-w \u002Fusr\u002Fbin\u002Fcontainerd -k docker\n-w \u002Fusr\u002Fbin\u002Frunc -k docker\nEOF\n\nsystemctl restart auditd\n```\n\n## Validation Commands\n\n```bash\n# Run Docker Bench Security\ndocker run --rm --net host --pid host \\\n  --userns host --cap-add audit_control \\\n  -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \\\n  -v \u002Fetc:\u002Fetc:ro \\\n  -v \u002Fusr\u002Fbin\u002Fcontainerd:\u002Fusr\u002Fbin\u002Fcontainerd:ro \\\n  -v \u002Fusr\u002Fbin\u002Frunc:\u002Fusr\u002Fbin\u002Frunc:ro \\\n  -v \u002Fusr\u002Flib\u002Fsystemd:\u002Fusr\u002Flib\u002Fsystemd:ro \\\n  -v \u002Fvar\u002Flib:\u002Fvar\u002Flib:ro \\\n  -v \u002Fvar\u002Frun\u002Fdocker.sock:\u002Fvar\u002Frun\u002Fdocker.sock:ro \\\n  docker\u002Fdocker-bench-security\n\n# Lint Dockerfile\nhadolint Dockerfile\n\n# Lint built image\ndockle myapp:latest\n\n# Verify no containers running as root\ndocker ps -q | xargs docker inspect --format '{{.Id}}: User={{.Config.User}}'\n```\n\n## Key Security Controls\n\n| Control | Implementation | CIS Section |\n|---------|---------------|-------------|\n| Non-root user | USER instruction in Dockerfile | 4.1 |\n| Read-only rootfs | --read-only flag | 5.12 |\n| Drop capabilities | --cap-drop ALL | 5.3 |\n| Resource limits | --memory, --cpus, --pids-limit | 5.10 |\n| No new privileges | --security-opt no-new-privileges | 5.25 |\n| Content trust | DOCKER_CONTENT_TRUST=1 | 4.5 |\n| TLS for daemon | daemon.json TLS config | 2.6 |\n| Audit logging | auditd rules | 1.1 |\n\n## References\n\n- [CIS Docker Benchmark](https:\u002F\u002Fwww.cisecurity.org\u002Fbenchmark\u002Fdocker)\n- [Docker Security Best Practices](https:\u002F\u002Fdocs.docker.com\u002Fengine\u002Fsecurity\u002F)\n- [Docker Bench Security Tool](https:\u002F\u002Fgithub.com\u002Fdocker\u002Fdocker-bench-security)\n- [Hadolint - Dockerfile Linter](https:\u002F\u002Fgithub.com\u002Fhadolint\u002Fhadolint)\n",{"name":5,"tags":52,"author":55,"domain":46,"license":15,"version":56,"nist_csf":57,"subdomain":42,"description":7,"mitre_attack":62},[28,27,53,29,54],"security","CIS-benchmark","mahipal","1.0",[58,59,60,61],"PR.PS-01","PR.IR-01","ID.AM-08","DE.CM-01",[63,64,65,66,67],"T1610","T1611","T1609","T1525","T1068","main","7925716f065257435fdb12e97f7e52842147d5ad",".claude\u002Fskills\u002Fhardening-docker-containers-for-production","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude","https:\u002F\u002Fclaude.com\u002Fclaude-code","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho","Software · Applied AI · Quantitative Modeling · Building with Claude.","2026-06-10 12:24:46",{"source":8,"skillName":5,"commands":77,"prompt":87,"zipAvailable":88},[78,81,84],{"tool":79,"command":80},"npx","npx skills add henriquescastilho\u002Fmy-claude --skill hardening-docker-containers-for-production",{"tool":82,"command":83},"bunx","bunx skills add henriquescastilho\u002Fmy-claude --skill hardening-docker-containers-for-production",{"tool":85,"command":86},"pnpm","pnpm dlx skills add henriquescastilho\u002Fmy-claude --skill hardening-docker-containers-for-production","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002FSKILL.md",true,[90,96,101,107,111,115,121],{"path":91,"resourceType":92,"resourceTypeDesc":93,"sizeBytes":94,"sourceHtmlUrl":95},"assets\u002Ftemplate.md","ASSET","资产文件",2822,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002Fassets\u002Ftemplate.md",{"path":97,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":99,"sourceHtmlUrl":100},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002FLICENSE",{"path":102,"resourceType":103,"resourceTypeDesc":104,"sizeBytes":105,"sourceHtmlUrl":106},"references\u002Fapi-reference.md","REFERENCE","参考文档",1818,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002Freferences\u002Fapi-reference.md",{"path":108,"resourceType":103,"resourceTypeDesc":104,"sizeBytes":109,"sourceHtmlUrl":110},"references\u002Fstandards.md",3676,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002Freferences\u002Fstandards.md",{"path":112,"resourceType":103,"resourceTypeDesc":104,"sizeBytes":113,"sourceHtmlUrl":114},"references\u002Fworkflows.md",4344,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002Freferences\u002Fworkflows.md",{"path":116,"resourceType":117,"resourceTypeDesc":118,"sizeBytes":119,"sourceHtmlUrl":120},"scripts\u002Fagent.py","SCRIPT","脚本",5041,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002Fscripts\u002Fagent.py",{"path":122,"resourceType":117,"resourceTypeDesc":118,"sizeBytes":123,"sourceHtmlUrl":124},"scripts\u002Fprocess.py",15194,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fhardening-docker-containers-for-production\u002Fscripts\u002Fprocess.py",[126,166,175,184,206,232],{"skillNo":127,"name":128,"nameZh":6,"description":129,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":130,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":147,"publishedAt":47},"01M6F0B6XPQ65AX2X0DWK8KT3E","markitdown","Convert files and office documents to Markdown. Supports PDF, DOCX, PPTX, XLSX, images (with OCR), audio (with transcription), HTML, CSV, JSON, XML, ZIP, YouTube URLs, EPubs and more.","MIT","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[133,136,139,142],{"categoryNo":134,"categoryName":135,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":137,"categoryName":138,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":140,"categoryName":141,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000004","电子表格",{"categoryNo":143,"categoryName":144,"taxonomyType":145,"taxonomyTypeDesc":146},"01JBSEEDCAT000000000000034","行政与办公人员","PROFESSION","适用职业",[128,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,32],"docx","PDF","pptx","xlsx","documents","csv","ocr","Audio","Bash","markdown","convert","read","write","edit","html","images","files","youtube",{"skillNo":167,"name":128,"nameZh":6,"description":129,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":130,"licenseFileUrl":6,"sourceHtmlUrl":168,"categories":169,"keywords":174,"publishedAt":47},"01M6F06SBHR9F0SDWE282Y8075","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fscientific_writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[170,171,172,173],{"categoryNo":134,"categoryName":135,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":137,"categoryName":138,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":140,"categoryName":141,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":143,"categoryName":144,"taxonomyType":145,"taxonomyTypeDesc":146},[128,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,32],{"skillNo":176,"name":128,"nameZh":6,"description":129,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":130,"licenseFileUrl":6,"sourceHtmlUrl":177,"categories":178,"keywords":183,"publishedAt":47},"01M6F02D4R14EJAPBWVDF9J9VQ","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[179,180,181,182],{"categoryNo":134,"categoryName":135,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":137,"categoryName":138,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":140,"categoryName":141,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":143,"categoryName":144,"taxonomyType":145,"taxonomyTypeDesc":146},[128,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,32],{"skillNo":185,"name":186,"nameZh":6,"description":187,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":130,"licenseFileUrl":6,"sourceHtmlUrl":188,"categories":189,"keywords":190,"publishedAt":47},"01M6F000KS6YB4MKS774G4R8ND","zarr-python","Chunked N-D arrays for cloud storage. Compressed arrays, parallel I\u002FO, S3\u002FGCS integration, NumPy\u002FDask\u002FXarray compatible, for large-scale scientific computing pipelines.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fzarr-python\u002FSKILL.md",[],[191,192,193,194,195,196,197,198,199,200,201,202,203,204,205],"python","zarr python","storage","integration","s3","gcs","cloud","dask","parallel","pipelines","arrays","numpy","scientific computing","scale","scientific",{"skillNo":207,"name":208,"nameZh":6,"description":209,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":130,"licenseFileUrl":6,"sourceHtmlUrl":210,"categories":211,"keywords":213,"publishedAt":47},"01M6EZZJWFXM1GR78KTW6J0DN8","what-if-oracle","Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like \"what if...\", \"what would happen if...\", \"what are the possibilities\", \"explore scenarios\", \"scenario analysis\", \"possibility space\", \"what could go wrong\", \"best case \u002F worst case\", \"risk analysis\", \"contingency planning\", \"strategic options\", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fwhat-if-oracle\u002FSKILL.md",[212],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[214,215,216,217,218,219,220,221,222,223,224,159,160,225,226,227,228,229,230,231],"oracle","what if oracle","go","run","ux","futures","analysis","explore","decision","branch","question","idea","exploration","options","stress-test","strategies","scenario","stress",{"skillNo":233,"name":234,"nameZh":6,"description":235,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":130,"licenseFileUrl":6,"sourceHtmlUrl":236,"categories":237,"keywords":248,"publishedAt":47},"01M6EZZCXAEB49RXGQCJX5E8GB","venue-templates","Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fvenue-templates\u002FSKILL.md",[238,241,244,245],{"categoryNo":239,"categoryName":240,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":242,"categoryName":243,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":246,"categoryName":247,"taxonomyType":145,"taxonomyTypeDesc":146},"01JBSEEDCAT000000000000036","内容创作者",[249,250,251,252,253,254,255,256,156,257,159,160,161,258,259,260,261,262,205,263],"templates","venue templates","research","guidelines","NeurIPS","ICML","LaTeX","science","access","proposals","Academic","requirements","formatting","journal","chi"]