Run any Skill in Manus with one click

security-patterns

Stars0

Forks0

UpdatedMarch 4, 2026 at 08:37

Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

CodeHalwell

CodeHalwell/DoclingOptimisation

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation

More from this repository

same repository

change-history

CodeHalwell/DoclingOptimisation

Maintain a structured JSON history of project changes in .history/changes.json. Use this skill after making any medium-to-large changes to the codebase. This includes: new files, API changes, schema changes, dependency changes, config changes, refactors, Dockerfile changes, and significant bug fixes. Do NOT log formatting-only changes, typo fixes, or trivial single-line edits. When in doubt, log it.

2026-03-040

docker-cicd-patterns

CodeHalwell/DoclingOptimisation

Use this skill when creating or modifying Dockerfiles, docker-compose files, GitHub Actions workflows, or deployment pipelines. Triggers on: container builds, CI/CD configuration, deployment automation, Azure Container App Jobs, Docker Hub, or any mention of "Docker", "container", "GitHub Actions", "workflow", "CI/CD", "pipeline", "deploy", or "build".

2026-03-040

git-workflow-patterns

CodeHalwell/DoclingOptimisation

Use this skill when working on branching, PRs, commits, or releases. Triggers on: branch naming, PR workflow, commit messages, release strategy, or mentions of "branch", "PR", "commit", "release", "versioning", "changelog", or "git workflow".

2026-03-040

observability-patterns

CodeHalwell/DoclingOptimisation

Use this skill when implementing logging, monitoring, timing, or diagnostics. Triggers on: logging setup, performance profiling, timing, stderr output, or mentions of "logging", "monitoring", "timing", "profiling", "observability", or "diagnostics".

2026-03-040

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation