Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

security-patterns

Sterne0

Forks0

Aktualisiert4. März 2026 um 08:37

Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

CodeHalwell

CodeHalwell/DoclingOptimisation

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

InformationssicherheitsanalystenInformatik- und Mathematikberufe·SOC 15-1212

SKILL.md

readonly

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation

Mehr aus diesem Repository

gleiches Repository

change-history

CodeHalwell/DoclingOptimisation

Maintain a structured JSON history of project changes in .history/changes.json. Use this skill after making any medium-to-large changes to the codebase. This includes: new files, API changes, schema changes, dependency changes, config changes, refactors, Dockerfile changes, and significant bug fixes. Do NOT log formatting-only changes, typo fixes, or trivial single-line edits. When in doubt, log it.

2026-03-040

docker-cicd-patterns

CodeHalwell/DoclingOptimisation

Use this skill when creating or modifying Dockerfiles, docker-compose files, GitHub Actions workflows, or deployment pipelines. Triggers on: container builds, CI/CD configuration, deployment automation, Azure Container App Jobs, Docker Hub, or any mention of "Docker", "container", "GitHub Actions", "workflow", "CI/CD", "pipeline", "deploy", or "build".

2026-03-040

git-workflow-patterns

CodeHalwell/DoclingOptimisation

Use this skill when working on branching, PRs, commits, or releases. Triggers on: branch naming, PR workflow, commit messages, release strategy, or mentions of "branch", "PR", "commit", "release", "versioning", "changelog", or "git workflow".

2026-03-040

observability-patterns

CodeHalwell/DoclingOptimisation

Use this skill when implementing logging, monitoring, timing, or diagnostics. Triggers on: logging setup, performance profiling, timing, stderr output, or mentions of "logging", "monitoring", "timing", "profiling", "observability", or "diagnostics".

2026-03-040

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation