菜单
Invoke BEFORE writing any Dockerfile or containerizing an app for deployment. Language-agnostic image-build conventions — multi-stage builds, non-root, layer caching, healthcheck, and hadolint tooling.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Gathers the project details each specialized coder needs before it writes code — frontend theme/typography/layout, backend API/caching/DB shape, containerization build/runtime shape, CI/CD pipeline shape — then hands each coder only its scoped answers. Use before invoking any coder, once a worktree feature is scoped, or whenever splitting work across parallel coders.
Builds a missing `<lang>-guidelines` skill for a language/stack, packaged as a standalone plugin and registered in a marketplace, before any code is written. Use whenever no `<lang>-guidelines` skill exists yet for the stack about to be coded (React, FastAPI, Docker, CI/CD, or anything else) — invoke this FIRST, before any coder runs, then follow the generated skill.
Invoke BEFORE writing any Python code (CLI tools, libraries, APIs, modules, tests). Encodes the project's Python + uv + ruff + pyright + pytest architecture, plus conditional references for DB, API, and caching work.
Invoke BEFORE writing any React/TypeScript frontend code (components, hooks, routes, forms). Encodes the project's React + TypeScript + Vite + pnpm conventions, architecture rules, and tooling commands.
Running log of the user's environment preferences and configuration changes — CLAUDE.md rules, settings, and conventions. Use to recall how the user likes their environment set up, and append a dated entry whenever you make an environment change (anything that isn't building a skill).
Read a project's plan.md and build or update a tasks.md broken into Milestones and sub-tasks, with per-task descriptions and a status tracking table, splitting tasks that are too large and marking progress. Use at the start of a project or session ("read the plan", "build a tasks file", "continue where we left off"), whenever a plan.md exists and tasks need to be derived or refreshed, or when the user asks to track/update project progress.
基于 SOC 职业分类
| name | containerization-guidelines |
| description | Invoke BEFORE writing any Dockerfile or containerizing an app for deployment. Language-agnostic image-build conventions — multi-stage builds, non-root, layer caching, healthcheck, and hadolint tooling. |
Follow these before writing any Dockerfile or packaging an app into an image. Language-agnostic; adapt the build/run commands to the app's stack.
latest. FROM node:22.11-slim@sha256:....-slim / -alpine for runtimes, distroless or scratch for static binaries. Don't ship a full OS to run one binary.docker build/BuildKit flags — never rely on training data.builder (compilers, dev deps, source) from the final runtime stage. Copy only the built artifact + runtime deps forward.AS builder) and COPY --from=builder. Final stage carries no toolchain, no source, no dev dependencies.COPY package.json package-lock.json ./ → RUN install → COPY . ..RUN commands with && and clean caches in the same layer (apt-get ... && rm -rf /var/lib/apt/lists/*). A separate cleanup layer saves nothing.npm ci, pip install -r, go mod download).RUN adduser -D app → USER app. Never run as root in the final stage.COPY --chown=app:app so files aren't root-owned. Read-only where possible.--secret, mounted files, orchestrator secrets). ARG/ENV values persist in history..dockerignore excludes .git, node_modules, secrets, local env files, build output — keeps context small and secrets out.WORKDIR set explicitly. EXPOSE the app port (documentation).ENTRYPOINT ["..."] / CMD ["..."] — shell form breaks signal handling (PID 1 won't get SIGTERM). Add an init (--init / tini) only if the app spawns children and won't reap them.HEALTHCHECK hitting a real readiness endpoint, with sensible --interval/--timeout/--retries.hadolint Dockerfile (fix every warning or justify with an inline # hadolint ignore=DLxxxx).docker build -t app:test . — must succeed with no warnings.docker run --rm app:test id) and the healthcheck passes.RUN --mount=type=cache) over custom cache scripts.