Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.

skills/performing-docker-bench-security-assessment/SKILL.md

@@ -1,8 +1,11 @@
 ---
 name: performing-docker-bench-security-assessment
-description: Docker Bench for Security is an open-source script that checks dozens
-  of common best practices around deploying Docker containers in production. Based
-  on the CIS Docker Benchmark, it audits host confi
+description: Run Docker Bench for Security, the open-source CIS Docker Benchmark audit
+  script, to check host configuration, Docker daemon settings, container images, and
+  runtime configurations, then interpret pass/fail/warn results and remediate common
+  failures. Use when auditing Docker hosts for CIS Benchmark compliance, scheduling
+  recurring container security assessments, or validating container runtime hardening
+  controls.
 domain: cybersecurity
 subdomain: container-security
 tags: