Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

security-patterns

Étoiles0

Forks0

Mis à jour4 mars 2026 à 08:37

Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

CodeHalwell

CodeHalwell/DoclingOptimisation

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation

Plus depuis ce dépôt

même dépôt

change-history

CodeHalwell/DoclingOptimisation

Maintain a structured JSON history of project changes in .history/changes.json. Use this skill after making any medium-to-large changes to the codebase. This includes: new files, API changes, schema changes, dependency changes, config changes, refactors, Dockerfile changes, and significant bug fixes. Do NOT log formatting-only changes, typo fixes, or trivial single-line edits. When in doubt, log it.

2026-03-040

docker-cicd-patterns

CodeHalwell/DoclingOptimisation

Use this skill when creating or modifying Dockerfiles, docker-compose files, GitHub Actions workflows, or deployment pipelines. Triggers on: container builds, CI/CD configuration, deployment automation, Azure Container App Jobs, Docker Hub, or any mention of "Docker", "container", "GitHub Actions", "workflow", "CI/CD", "pipeline", "deploy", or "build".

2026-03-040

git-workflow-patterns

CodeHalwell/DoclingOptimisation

Use this skill when working on branching, PRs, commits, or releases. Triggers on: branch naming, PR workflow, commit messages, release strategy, or mentions of "branch", "PR", "commit", "release", "versioning", "changelog", or "git workflow".

2026-03-040

observability-patterns

CodeHalwell/DoclingOptimisation

Use this skill when implementing logging, monitoring, timing, or diagnostics. Triggers on: logging setup, performance profiling, timing, stderr output, or mentions of "logging", "monitoring", "timing", "profiling", "observability", or "diagnostics".

2026-03-040

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation