Execute qualquer Skill no Manus
com um clique

Execute qualquer Skill no Manus com um clique

security-patterns

Estrelas0

Forks0

Atualizado4 de março de 2026 às 08:37

Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Instalação

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Executar no Manus

Fonte

CodeHalwell

CodeHalwell/DoclingOptimisation

Abrir repositório GitHub Ver repositórios do creator

Download

Executar no Manus

Ocupações relacionadasSOC

Baseado na classificação ocupacional SOC

Analistas de segurança da informaçãoInformática e Matemática·SOC 15-1212

SKILL.md

readonly

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation

Mais deste repositório

mesmo repositório

change-history

CodeHalwell/DoclingOptimisation

Maintain a structured JSON history of project changes in .history/changes.json. Use this skill after making any medium-to-large changes to the codebase. This includes: new files, API changes, schema changes, dependency changes, config changes, refactors, Dockerfile changes, and significant bug fixes. Do NOT log formatting-only changes, typo fixes, or trivial single-line edits. When in doubt, log it.

2026-03-040

docker-cicd-patterns

CodeHalwell/DoclingOptimisation

Use this skill when creating or modifying Dockerfiles, docker-compose files, GitHub Actions workflows, or deployment pipelines. Triggers on: container builds, CI/CD configuration, deployment automation, Azure Container App Jobs, Docker Hub, or any mention of "Docker", "container", "GitHub Actions", "workflow", "CI/CD", "pipeline", "deploy", or "build".

2026-03-040

git-workflow-patterns

CodeHalwell/DoclingOptimisation

Use this skill when working on branching, PRs, commits, or releases. Triggers on: branch naming, PR workflow, commit messages, release strategy, or mentions of "branch", "PR", "commit", "release", "versioning", "changelog", or "git workflow".

2026-03-040

observability-patterns

CodeHalwell/DoclingOptimisation

Use this skill when implementing logging, monitoring, timing, or diagnostics. Triggers on: logging setup, performance profiling, timing, stderr output, or mentions of "logging", "monitoring", "timing", "profiling", "observability", or "diagnostics".

2026-03-040

name	security-patterns
description	Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation