Skip to main content

docker-backend-patterns

Provides best practices for Docker containerization of Node.js applications, optimizing image size and deployment strategies.

Install this skill

or
68/100

Security score

The docker-backend-patterns skill was audited on Feb 9, 2026 and we found 12 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 133

Template literal with variable interpolation in command context

SourceSKILL.md
133```yaml
medium line 242

Template literal with variable interpolation in command context

SourceSKILL.md
242```dockerfile
medium line 395

Template literal with variable interpolation in command context

SourceSKILL.md
395app.log.info(`Received ${signal}, shutting down gracefully...`);
medium line 439

Template literal with variable interpolation in command context

SourceSKILL.md
439```yaml
medium line 77

Wget to non-GitHub URL

SourceSKILL.md
77CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1
low line 90

Access to .env file

SourceSKILL.md
90.env
low line 91

Access to .env file

SourceSKILL.md
91.env.*
low line 92

Access to .env file

SourceSKILL.md
92!.env.example
low line 340

Access to .env file

SourceSKILL.md
340version: process.env.APP_VERSION ?? 'unknown',
low line 419

Access to .env file

SourceSKILL.md
419docker run -d --name myapp -p 3000:3000 --env-file .env myapp:latest
low line 77

External URL reference

SourceSKILL.md
77CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1
low line 156

External URL reference

SourceSKILL.md
156test: ["CMD", "wget", "--spider", "http://localhost:3000/health"]
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →