dockerize SKILL.md skillA
dockerize from tanq16/claudex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add tanq16/claudex/dockerize@git:20260827.716177cPins git:20260827.716177c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- tanq16/claudex
- Path
internal/embedded/presets/private/skills/dockerize/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260827.716177c, committed Aug 27, 2026
- First version recorded
- Aug 18, 2026
- Size
- 11,193 bytes
- Repository stars
- 3
- License
- none declared
Containerizing any project - multi-stage builds, choosing a base image, packaging the runtime, clearing package-manager caches, and running as a non-root user. Use when writing or changing a Dockerfile, picking a base image, deciding between alpine and debian-slim, building an image for more than one architecture, adding a docker-compose file, or when a container runs as root. Triggers on Dockerfile, docker-compose.yaml, FROM, multi-stage builds, buildx, BUILDPLATFORM, TARGETARCH, apk add…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Dockerize
**Two stages, one image per architecture from one file, a runtime packaged rather than assumed where the language allows it, caches cleared inside the layer that made them, and a fixed non-root user.**
This applies to any language. What changes between them is the builder image and how the runtime gets into the final stage.
## Rules
A build has exactly two stages. The builder carries the compilers, package managers, and source; the final stage carries the artifact and its runtime dependencies and nothing else. Copying the builder wholesale ships a toolchain, the full source, and every intermediate object to production, which is both a large image and a large attack surface.
A package manager's cache is cleared in the same `RUN` that created it. A separate `RUN rm -rf` writes a new layer that deletes files the previous layer still contains, so the image keeps both and grows rather than shrinks.
```dockerfile
# alpine
RUN apk add --no-cache ca-certificates tzdata
# debian
RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates tzdata \
&& rm -rf /var/lib/apt/lists/*
```
…Read the whole file at its exact version.
How to install
mdr add tanq16/claudex/dockerize@sha256:ead7e100a168dd81The line at the top of this page pins the label git:20260827.716177c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_vgyr6nowk3mqeazq)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Aug 18, 2026 and Aug 27, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260827.716177c latest | 2026-08-27 | 716177c | 11,193 B | A | view · diff |
| git:20260827.2da6b8d | 2026-08-27 | 2da6b8d | 11,193 B | A | view · diff |
| git:20260823.6fc625e | 2026-08-23 | 6fc625e | 11,193 B | A | view · diff |
| git:20260818.236909b | 2026-08-18 | 236909b | 9,095 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11193 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
tanq16/claudex · 3 stars · license none declared · pushed 2026-10-12 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_vgyr6nowk3mqeazq GET https://markdownregistry.com/api/v1/resolve?ref=tanq16/claudex/dockerize GET https://markdownregistry.com/api/v1/blob/ead7e100a168dd816ca23ab84554ae4269721658fe77409ef4c0a5b496b07bd6
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.