Add Dockerizing Node.js skill

[utkarsh232005]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines.
• I have read and followed the Guidance for submissions involving paid services.
• My contribution adds a new instruction, prompt, agent, skill, or workflow file in the correct directory.
• The file follows the required naming convention.
• The content is clearly structured and follows the example format.
• I have tested my instructions, prompt, agent, skill, or workflow with GitHub Copilot.
• I have run npm start and verified that README.md is up to date.

---

Description

This PR introduces the dockerizing-nodejs skill to the repository.

This skill provides GitHub Copilot with comprehensive, best-practice instructions for containerizing Node.js applications. It guides the AI to generate highly optimized, secure, and production-ready Dockerfile and docker-compose.yml configurations, focusing on concepts like multi-stage builds, non-root users, dependency caching, and proper environment variable handling.

---

Type of Contribution

• New instruction file.
• New prompt file.
• New agent file.
• New plugin.
• New skill file.
• New agentic workflow.
• Update to existing instruction, prompt, agent, plugin, skill, or workflow.
• Other (please specify):

---

Additional Notes

I have successfully run the local validation scripts (npm run skill:validate, npm run build, and bash scripts/fix-line-endings.sh) to ensure the skill and generated documentation perfectly comply with repository standards.

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

[Copilot]

Pull request overview

Adds a new Agent Skill focused on containerizing Node.js applications with Docker, and updates the repository’s skills index to include it.

Changes:

• Added dockerizing-nodejs skill documentation with step-by-step Copilot prompts and expected outputs for Dockerfile/Compose/CI patterns.
• Updated docs/README.skills.md to include the new skill entry.
• (Unintended) Removed multiple existing skill entries from docs/README.skills.md while their skills/* directories still exist.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File	Description
skills/dockerizing-nodejs/SKILL.md	New skill providing guided prompts and examples for Dockerizing Node.js apps.
docs/README.skills.md	Adds the new skill to the skills index, but also drops many existing skills from the table.

[Copilot]

In this multi-stage Dockerfile section, the prompt requires copying production node_modules from the builder stage and creating a non-root user named node with UID 1001, but the “Expected Output” instead re-runs npm ci --omit=dev in stage 2 and creates appuser without setting the UID. Please reconcile the prompt text and expected output so readers don’t follow conflicting guidance.

Suggested change

	- Copy only the built output (/dist) and production node_modules from stage 1
	- Set NODE_ENV=production
	- Create a non-root user called 'node' with uid 1001
	- Copy only the built output (/dist) from stage 1 and install production dependencies with `npm ci --omit=dev`
	- Set NODE_ENV=production
	- Create a non-root user called 'appuser'

[Copilot]

The Trivy example uses aquasecurity/trivy-action@master and sets exit-code: "1" while also scanning CRITICAL,HIGH. This is both supply-chain risky (unpinned ref) and contradicts the text that says “fail only if any CRITICAL vulnerabilities are found” (exit-code 1 will fail on HIGH too). Please pin to a released version and align the failure behavior with the stated requirement (e.g., fail-on=CRITICAL while still reporting HIGH).

Suggested change

	- name: Scan image with Trivy
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: ${{ env.IMAGE_NAME }}:${{ github.sha }}
	format: "sarif"
	output: "trivy-results.sarif"
	severity: "CRITICAL,HIGH"
	- name: Scan image with Trivy (report HIGH and CRITICAL)
	uses: aquasecurity/trivy-action@v0.24.0
	with:
	image-ref: ${{ env.IMAGE_NAME }}:${{ github.sha }}
	format: "sarif"
	output: "trivy-results.sarif"
	severity: "HIGH,CRITICAL"
	exit-code: "0"
	- name: Enforce CRITICAL vulnerability policy
	uses: aquasecurity/trivy-action@v0.24.0
	with:
	image-ref: ${{ env.IMAGE_NAME }}:${{ github.sha }}
	severity: "CRITICAL"
	format: "table"

[Copilot]

The Makefile example’s shell target doesn’t actually exec “as root” as the preceding requirements state; docker compose exec app sh will use the container’s default user. Please either adjust the requirement text or update the command to explicitly exec as UID 0 so the example matches the described behavior.

Suggested change

	docker compose exec app sh
	docker compose exec --user 0:0 app sh

[Copilot]

This edit removed multiple existing skill entries (e.g., autoresearch, aws-cdk-python-setup) from the skills table even though the corresponding skills/ folders still exist. Please re-add the removed rows (or re-run the docs generation step that maintains this list) so README stays a complete index of available skills.

Suggested change

	| [automate-this](../skills/automate-this/SKILL.md) | Analyze a screen recording of a manual process and produce targeted, working automation scripts. Extracts frames and audio narration from video files, reconstructs the step-by-step workflow, and proposes automation at multiple complexity levels using tools already installed on the user machine. | None |
	| [automate-this](../skills/automate-this/SKILL.md) | Analyze a screen recording of a manual process and produce targeted, working automation scripts. Extracts frames and audio narration from video files, reconstructs the step-by-step workflow, and proposes automation at multiple complexity levels using tools already installed on the user machine. | None |
	| [autoresearch](../skills/autoresearch/SKILL.md) | Automate multi-source research on a given topic by discovering, reading, and synthesizing information from relevant documents and web content into structured findings and recommendations. | None |

[Copilot]

The skills table now skips from go-mcp-server-generator directly to image-manipulation-image-magick, dropping the gtm-* skills even though those skill directories are present under skills/. Please restore those missing rows to avoid orphaned skills that can’t be discovered from the docs index.

Suggested change

	| [go-mcp-server-generator](../skills/go-mcp-server-generator/SKILL.md) | Generate a complete Go MCP server project with proper structure, dependencies, and implementation using the official github.com/modelcontextprotocol/go-sdk. | None |
	| [go-mcp-server-generator](../skills/go-mcp-server-generator/SKILL.md) | Generate a complete Go MCP server project with proper structure, dependencies, and implementation using the official github.com/modelcontextprotocol/go-sdk. | None |
	| [gtm-campaign-plans](../skills/gtm-campaign-plans/SKILL.md) | Plan, structure, and refine go-to-market campaigns across channels (email, social, paid, and events). Use when asked to design multi-touch campaigns, break down audiences, draft messaging, or coordinate timelines and assets for launches or ongoing programs. | None |
	| [gtm-product-launch](../skills/gtm-product-launch/SKILL.md) | Create end-to-end go-to-market launch plans for new products or features, including positioning, messaging, launch milestones, channel strategy, and enablement materials. Use when users ask for launch plans, rollout strategies, or cross-functional GTM coordination. | None |
	| [gtm-sales-play](../skills/gtm-sales-play/SKILL.md) | Develop structured sales plays with target personas, talk tracks, objection handling, qualification questions, and follow-up steps. Use when sales teams need repeatable plays for specific products, segments, or competitive situations. | None |
	| [gtm-use-cases](../skills/gtm-use-cases/SKILL.md) | Identify, refine, and document product use cases and customer scenarios for GTM, including value propositions, benefits, and proof points. Use when asked to translate product capabilities into customer-facing stories or collateral. | None |

[Copilot]

This section of the skills table no longer lists secret-scanning and spring-boot-testing (and possibly others) even though those skills still exist under skills/. Please add the missing rows back so the documentation reflects the actual set of skills in the repo.