Owasp Docker Agent Skill
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
Install
one command, takes just this skill from the repositorynpx skills add https://github.com/microsoft/hve-core --skill owasp-dockerWhat comes with it
31 403 bytes besides the instructionThe instruction itself
4 sections, as written by the authorOWASP® Docker Top 6 — Skill Entry
This SKILL.md is the entrypoint for the OWASP Docker Top 6 skill.
The skill encodes the OWASP Docker Security Top 6 as structured, machine-readable references
that an agent can query to identify, assess, and remediate Docker container security risks.
Normative references (Docker Top 6)
- 00 Vulnerability Index
- 01 Secure User Mapping
- 02 Patch Management Strategy
- 03 Network Segmentation and Firewalling
- 04 Secure Defaults and Hardening
- 05 Maintain Security Contexts
- 06 Resource Protection
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Docker Top 6 normative documents.00-vulnerability-index.md— index of all vulnerability identifiers, categories, and cross-references.01through06— one document per vulnerability aligned with OWASP Docker Security numbering.
Third-Party Attribution
Copyright © OWASP Foundation.
OWASP® Docker Top 10 content is derived from works by the
OWASP Foundation, licensed under CC BY-NC-SA 4.0
(<https://creativecommons.org/licenses/by-nc-sa/4.0/>).
Source: <https://owasp.org/www-project-docker-top-10/>
Modifications: Vulnerability descriptions restructured into agent-consumable reference
documents with added detection and remediation guidance.
OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.
Other skills for the same job
different authors, same section of the catalogue
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Comprehensive AWS security posture assessment using AWS CLI and security best practices
Azure AI Text Analytics SDK for sentiment analysis, entity recognition, key phrases, language detection, PII, and healthcare NLP. Use for natural language processing on text.
Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.
How to use it
Take microsoft/owasp-docker from the repository into ~/.claude/skills for personal
use, or into .claude/skills inside a project.
The agent identifies a skill by the name field in its header. Two skills with the
same name cannot sit side by side — one of them will be ignored.