AgentSkillsCN

darwin-dockerfile-safety

修改Dockerfile与Containerfile时的安全规则。当您编辑容器构建文件时，可使用此功能。

SKILL.md
--- frontmatter
name: darwin-dockerfile-safety
description: Safety rules for modifying Dockerfiles and Containerfiles. Use when editing container build files.

Dockerfile Safety Rules

Allowed Modifications

You MAY add:

  • •ARG -- build arguments
  • •ENV -- environment variables
  • •COPY -- copy files into the image
  • •RUN -- install packages or run build commands
  • •EXPOSE -- declare ports

Forbidden Modifications

You MUST NOT change:

  • •FROM -- base image (changing this breaks the build chain)
  • •CMD / ENTRYPOINT -- the container's startup command
  • •USER -- the runtime user (security context)
  • •WORKDIR -- the working directory

You MUST NOT remove:

  • •Existing COPY, RUN, or CMD lines
  • •Running processes from CMD (e.g., removing a sidecar process)

When to Stop

If a task requires changing FROM, CMD, USER, or WORKDIR, stop and report that it requires Architect review. Do not proceed.