Marketplace for trusted AI agent skills

Skill Detail

Review Dockerfiles for risky patterns and bad defaults with hadolint

Catch insecure Dockerfile patterns, brittle package-install habits, and shell pitfalls before image builds ship.

Security & VerificationMulti-Framework
Security & Verification Multi-Framework Security Reviewed
⭐ 12.1k GitHub stars
COPY SKILL INSTRUCTIONS (OPTIONAL)
npx skills add agentskillexchange/skills --skill review-dockerfiles-for-risky-patterns-and-bad-defaults-with-hadolint Copy
Uses the third-party skills CLI, not an ASE-owned installer. Check your agent’s compatibility. This copies instructions; complete the upstream tool setup below separately.
View source
At a glance
Tools required
hadolint binary and Dockerfiles
Install & setup
Install hadolint from the project releases, package manager, or container image, then run hadolint Dockerfile during review or CI.
Author
hadolint
Publisher
Organization
Last updated
Apr 15, 2026
Quick brief

Use hadolint when an agent is reviewing Dockerfiles before build or release. It can flag risky base-image choices, bad package installation patterns, missing cleanup, and shell mistakes that make container images less secure or less reproducible. The boundary is Dockerfile review before image creation, not a generic container platform or registry listing.