用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/oimiragieo/agent-studio --skill container-expert命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | container-expert |
| description | Container orchestration expert including Docker, Kubernetes, Helm, and service mesh |
| version | 1.1.0 |
| model | sonnet |
| invoked_by | both |
| user_invocable | true |
| tools | ["Read","Write","Edit","Bash","Grep","Glob"] |
| consolidated_from | 5 skills |
| best_practices | ["Follow domain-specific conventions","Apply patterns consistently","Prioritize type safety and testing"] |
| error_handling | graceful |
| streaming | supported |
| verified | true |
| lastVerifiedAt | "2026-02-22T00:00:00.000Z" |
| source | builtin |
| trust_score | 100 |
| provenance_sha | 964030ad7f8bafe8 |
When reviewing or writing code, apply these guidelines:
docker-compose command.When reviewing or writing code, apply these guidelines:
When reviewing or writing code, apply these guidelines:
Project-Specific Notes: Istio should be leveraged for inter-service communication, security, and monitoring.
When reviewing or writing code, apply these guidelines:
When reviewing or writing code, apply these guidelines:
Project-Specific Notes: The backend should be implemented as Knative services.
Example usage: ``` User: "Review this code for container best practices" Agent: [Analyzes code against consolidated guidelines and provides specific feedback] ```This expert skill consolidates 5 individual skills:
USER in Dockerfile and runAsNonRoot: true in pod security context.docker-compose (hyphenated) — docker-compose is the deprecated v1 CLI; use docker compose (space, v2 plugin) which is maintained and included in Docker Desktop.| Anti-Pattern | Why It Fails | Correct Approach |
|---|---|---|
| Running as root in container | Privilege escalation via any CVE in the container | Set USER nonroot in Dockerfile; runAsNonRoot: true |
| Secrets in environment variables or image layers | Leaked in docker inspect, logs, and image exports | Use Kubernetes Secrets with RBAC; external secret managers |
| No resource limits on pods | One pod starves the node; cascading failures | Set CPU/memory requests AND limits on all pods |
| Missing health probes | Traffic routed to unhealthy pods indefinitely | Add livenessProbe and readinessProbe to all containers |
Using docker-compose (deprecated v1) | Deprecated; lacks compose v2 features and fixes | Use docker compose (space, Docker Engine plugin) |
Before starting:
cat .claude/context/memory/learnings.md
After completing: Record any new patterns or exceptions discovered.
ASSUME INTERRUPTION: Your context may reset. If it's not in memory, it didn't happen.