Skip to content
container-security-scanner logo

Container Security Scanner

container-security-scanner

Scan images and runtime for CVEs and policy violations.

SKILL.md

Full skill instructions

Container Security Scanner

Purpose

  • Scan images and runtime for CVEs and policy violations.

Preconditions

  • Access to system context (repos, infra, environments)
  • Confirmed requirements and constraints
  • Required approvals for security, compliance, or governance

Inputs

  • Problem statement and scope
  • Current architecture or system constraints
  • Non-functional requirements (performance, security, compliance)
  • Target stack and environment

Outputs

  • Design or implementation plan
  • Required artifacts (diagrams, configs, specs, checklists)
  • Validation steps and acceptance criteria

Detailed Step-by-Step Procedures

  1. Clarify scope, constraints, and success metrics.
  2. Review current system state, dependencies, and integration points.
  3. Select patterns, tools, and architecture options that match constraints.
  4. Produce primary artifacts (docs/​specs/​configs/​code stubs).
  5. Validate against requirements and known risks.
  6. Provide rollout and rollback guidance.

Decision Trees and Conditional Logic

  • If compliance or regulatory scope applies -> add required controls and audit steps.
  • If latency budget is strict -> choose low-latency storage and caching.
  • Else -> prefer cost-optimized storage and tiering.
  • If data consistency is critical -> prefer transactional boundaries and strong consistency.
  • Else -> evaluate eventual consistency or async processing.

Error Handling and Edge Cases

  • Partial failures across dependencies -> isolate blast radius and retry with backoff.
  • Data corruption or loss risk -> enable backups and verify restore path.
  • Limited access to systems -> document gaps and request access early.
  • Legacy dependencies with limited change tolerance -> use adapters and phased rollout.

Tool Requirements and Dependencies

  • CLI and SDK tooling for the target stack
  • Credentials or access tokens for required environments
  • Diagramming or spec tooling when producing docs

Stack Profiles

  • Use Profile A, B, or C from skills/​STACK_PROFILES.md.
  • Note selected profile in outputs for traceability.

Validation

  • Requirements coverage check
  • Security and compliance review
  • Performance and reliability review
  • Peer or stakeholder sign-off

Rollback Procedures

  • Revert config or deployment to last known good state.
  • Roll back database migrations if applicable.
  • Verify service health, data integrity, and error rates after rollback.

Success Metrics

  • Measurable outcomes (latency, error rate, uptime, cost)
  • Acceptance thresholds defined with stakeholders

Example Workflows and Use Cases

  • Minimal: apply the skill to a small service or single module.
  • Production: apply the skill to a multi-service or multi-tenant system.

More skills from diegosouzapw

accessibility logo
diegosouzapw/awesome-omni-skill

accessibility

Accessibility guidelines for VS Code features — covers accessibility help dialogs, accessible views, verbosity settings, accessibility signals, ARIA alerts/status announcements, keyboard navigation, and ARIA labels/roles. Applies to both new interactive UI surfaces and updates to existing feature...

62 1
View
mermaid-diagrams logo
diegosouzapw/awesome-omni-skill

mermaid-diagrams

Mermaid diagram creation for flowcharts, sequences, ERDs, and more. Generate diagrams from text in markdown files. Use for documentation, architecture diagrams, and visual representations. Triggers on mermaid, flowchart, sequence diagram, ERD, entity relationship, gantt chart, pie chart, class di...

62 1
View
tauri2-react-rust logo
diegosouzapw/awesome-omni-skill

tauri2-react-rust

Guides development of cross-platform desktop apps with Tauri 2, TypeScript, React, and Rust. Use when building Tauri apps, implementing IPC, designing Rust backend or TypeScript/React frontend, when researching or cloning a website (open site, snapshot elements), when verifying local dev or built...

62 1
View
fp-ts-errors logo
diegosouzapw/awesome-omni-skill

fp-ts-errors

Handle errors as values using fp-ts Either and TaskEither for cleaner, more predictable TypeScript code. Use when implementing error handling patterns with fp-ts.

62 0
View
ring:pre-dev-research logo
diegosouzapw/awesome-omni-skill

ring:pre-dev-research

Gate 0 research phase for pre-dev workflow. Dispatches 3 parallel research agents to gather codebase patterns, external best practices, and framework documentation BEFORE creating PRD/TRD. Outputs research.md with file:line references.

62 0
View
create-assistant logo
diegosouzapw/awesome-omni-skill

create-assistant

Create and configure Vapi voice AI assistants with models, voices, transcribers, tools, hooks, and advanced settings. Use when building voice agents, phone bots, customer support assistants, or any conversational AI that handles phone or web calls.

62 0
View
codex-headless logo
diegosouzapw/awesome-omni-skill

codex-headless

Delegiere Aufgaben an OpenAI Codex CLI im Headless-Mode. Nutzt ChatGPT Subscription (KEIN API Key). Nur Workspace-Zugriff, KEIN System-Zugriff. Auto-Accept mit --full-auto. Web-Recherche mit --search.

62 0
View
social-media-scheduler logo
diegosouzapw/awesome-omni-skill

social-media-scheduler

Generate a full week of social media content for any topic. Outputs platform-optimized posts for Twitter/X, LinkedIn, and Instagram with hashtags and posting times.

62 0
View
Data Privacy Compliance logo
diegosouzapw/awesome-omni-skill

Data Privacy Compliance

Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or managing data subject rights. Expert in consent management, da...

62 0
View
triple-review logo
diegosouzapw/awesome-omni-skill

triple-review

Reviews a task using the TRIPLE protocol, as the review agent.

62 0
View
Tech Stack & Architecture Decision logo
diegosouzapw/awesome-omni-skill

Tech Stack & Architecture Decision

Define and document the technology stack and architecture decisions for a project. Use when the user needs to choose a tech stack, make architecture decisions, define infrastructure choices, or document technology selections. Triggers on requests like "define the tech stack", "choose technologies...

62 0
View

Popular AI tools

Kaiber logo
Video

Kaiber

Generate, edit, and beat-sync AI video with leading models in one workspace.

Paid
View
Vimcal logo
Productivity

Vimcal

The world's fastest calendar for remote work

Free
View

Transform Your Design with AI Designer by ImgCreator.ai

Freemium
View
Akool AI logo
Content & writing

Akool AI

Revolutionizing Video Production with AI-Powered Creativity

Paid
View

Extend an image past the frame and let AI fill the new aspect ratio.

Freemium
View
StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
C

ChainClarity explains 700+ crypto whitepapers in plain English, with layered summaries, comparisons, research tools, alerts, and a $4.99 Pro plan.

Freemium
View
Opus Clip logo
Coding & apps

Opus Clip

Opus.ai: Revolutionize Your Web Experience

Free
View