How do I install the Security Patterns skill?

Run npx skillmds add majiayu000/security-patterns-4 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Security Patterns safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Security Patterns?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Security Patterns free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Security Patterns?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Security Patterns by majiayu000 — Agent Skill

Name: Security Patterns
Rating: 4.2 (5 reviews)
Author: majiayu000

Security Patterns

Use this skill when working on credentials, secrets, environment variables, Docker security, or any security-related concern. Triggers on: secrets management, credential handling, Docker security, environment variables, or mentions of "security", "secrets", "credentials", "env vars", or "vulnerability".

majiayu000 c17d718 2 files · 2.3 KB Updated Sep 9, 2026 567 repo stars

File contents

Security Patterns — DoclingOptimisation

Secrets Management

Environment variables for all runtime configuration (DOCLING_* vars)
Never hardcode API keys, tokens, or credentials in code
Docker Hub credentials via GitHub Secrets in CI/CD
Azure Container App secrets for runtime environment variables

Docker Security

Non-root user (docling:docling) in runtime image
No dev dependencies in runtime stage
Minimal runtime packages (only what's needed)
No shell access in production (consider --no-install-recommends)
Pin base image versions to prevent supply chain attacks

Model Downloads

Models pre-fetched at build time from HuggingFace Hub and ModelScope CDN
HF_HUB_ETAG_TIMEOUT=0 and HF_HUB_DOWNLOAD_TIMEOUT=5 prevent runtime downloads
Verify model integrity if moving to a private registry

Input Validation

PDF path validation in process.py (exists, is file, is readable)
File size limits should be enforced at the Container App Job level
Never trust user-provided paths without validation

Frequently asked questions