All skills
containerization
FoundationJIT onlytask-agent/review-agent: use when image layers, build context, runtime user, secrets, health checks, shutdown, or provenance change; skip when container behavior is unaffected.
- Group
- Delivery & platform
- Supported roles
- MainAnalysisTaskReview
- Source
- SKILL.md
Use when
Trigger signals that make this skill the right owner
- container image change affects build context, layer contents, runtime user and group, filesystem, process or health and shutdown behavior, or artifact provenance
Do not use when
Anti-triggers — as binding as the triggers above
- image definition and container runtime contract are unchanged
Required inputs
What must be supplied before this skill can decide anything
- current task contract
- selected primary Professional Skill
- task-local trigger evidence
Output contract
What this skill owes the next role
- Return a container decision: define build/runtime boundary, artifact identity, privilege, filesystem, process, probes, validation, rollback, and residual risk
Escalation signals
When this skill must hand the decision back
- Unsafe containers increase attack surface and deployment inconsistency
Loaded by
This skill never owns a task. These professionals may pull it in as Layer 3.
Targeted references
Each reference carries its own load condition. None of them enter context by default.
| Reference | Load when | Do not load when | Required by |
|---|---|---|---|
| benchmarks-and-patterns.mdbenchmark-pattern | base build isolation runtime contents process or provenance choices compete | existing image and runtime policy resolve the changed boundary | TaskReview |
| checklist.mddecision-checklist | image change affects context contents identity filesystem probes shutdown or rollback | no container build or runtime boundary changes | TaskReview |
| evidence-patterns.mdevidence-pattern | digest content user secret health shutdown scan or rollback claims need fresh proof | no image artifact-to-runtime claim awaits validation | TaskReview |