container-security-hardening 是做什么的?
强化 Docker/容器镜像和运行时部署,涵盖安全基础镜像、非 root 用户、CVE 扫描、SBOM/签名、seccomp/AppArmor 以及 Kubernetes Pod 安全控制。适用于 Dockerfile 安全审查、容器 CVE、镜像扫描、无发行版镜像或生产环境加固。
强化 Docker/容器镜像和运行时部署,涵盖安全基础镜像、非 root 用户、CVE 扫描、SBOM/签名、seccomp/AppArmor 以及 Kubernetes Pod 安全控制。适用于 Dockerfile 安全审查、容器 CVE、镜像扫描、无发行版镜像或生产环境加固。
该技能专注于容器安全加固,帮助开发者和运维人员系统性地提升 Docker 和 Kubernetes 环境的安全性。它覆盖了从镜像构建到运行时部署的整个生命周期,包括:使用安全基础镜像(如 distroless 镜像)、以非 root 用户运行容器、进行 CVE 扫描和生成软件物料清单(SBOM)、签名镜像以验证完整性、配置 seccomp 和 AppArmor 安全配置文件,以及实施 Kubernetes Pod 安全策略(如 Pod Security Standards 或 OPA/Gatekeeper)。支持的平台包括 Docker、Kubernetes 以及常见的 CI/CD 工具链。通过提供详细的指导和可复用的配置模板,该技能使用户能够快速识别和修复容器化应用中的常见安全漏洞,满足生产环境对安全性和合规性的严格要求。其核心价值在于将分散的安全实践整合为清晰的操作流程,降低容器逃逸、权限提升和数据泄露的风险。
npx skills add https://github.com/dhar174/DeskBuddy/tree/main/.agents/skills/container-security-hardening强化 Docker/容器镜像和运行时部署,涵盖安全基础镜像、非 root 用户、CVE 扫描、SBOM/签名、seccomp/AppArmor 以及 Kubernetes Pod 安全控制。适用于 Dockerfile 安全审查、容器 CVE、镜像扫描、无发行版镜像或生产环境加固。
This repo contains 2 individual skills — each has its own dedicated page.
Trains and fine-tunes vision models for object detection (D-FINE, RT-DETR v2, DETR, YOLOS), image classification (timm models — MobileNetV3, MobileViT, ResNet, ViT/DINOv3 — plus any Transformers classifier), and SAM/SAM2 segmentation using Hugging Face Transformers on Hugging Face Jobs...
Secure environment variable management ensuring secrets are never exposed in Claude sessions, terminals, logs, or git commits
ElevenLabs text-to-speech with mac-style say UX.
Oracle CLI second-model review/debug/refactor/design with selected files, dry-run token checks, API or browser engine.
Capture and automate macOS UI with the Peekaboo CLI.
Generate multiple radically different interface designs for a module using parallel sub-agents. Use when user wants to design an API, explore interface options, compare module shapes, or mentions "design it twice".
Build a throwaway prototype to flesh out a design — a runnable terminal app for state/business-logic questions, or several radically different UI variations toggleable from one route.
Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".