Owasp Docker

microsoft/owasp-docker

OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.

8k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

1313

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/microsoft/hve-core --skill owasp-docker

31 403 bytes besides the instruction

references/00-vulnerability-index.md

references/01-secure-user-mapping.md

references/02-patch-management-strategy.md

references/03-network-segmentation-firewalling.md

references/04-secure-defaults-hardening.md

references/05-maintain-security-contexts.md

references/06-resource-protection.md

4 sections, as written by the author

This SKILL.md is the entrypoint for the OWASP Docker Top 6 skill.

The skill encodes the OWASP Docker Security Top 6 as structured, machine-readable references

that an agent can query to identify, assess, and remediate Docker container security risks.

SKILL.md — this file (skill entrypoint).
references/ — the Docker Top 6 normative documents.
00-vulnerability-index.md — index of all vulnerability identifiers, categories, and cross-references.
01 through 06 — one document per vulnerability aligned with OWASP Docker Security numbering.

OWASP® Docker Top 10 content is derived from works by the

OWASP Foundation, licensed under CC BY-NC-SA 4.0

(<https://creativecommons.org/licenses/by-nc-sa/4.0/>).

Source: <https://owasp.org/www-project-docker-top-10/>

Modifications: Vulnerability descriptions restructured into agent-consumable reference

documents with added detection and remediation guidance.

OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.

Copy the folder

Take microsoft/owasp-docker from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.