diff --git a/docker/skills-init/Dockerfile b/docker/skills-init/Dockerfile
index dc89810f74..1512ed538c 100644
--- a/docker/skills-init/Dockerfile
+++ b/docker/skills-init/Dockerfile
@@ -17,7 +17,13 @@ FROM alpine:3.23
 ARG PYTHON_UID=1001
 ARG PYTHON_GID=1001
 
-RUN apk upgrade --no-cache && apk add --no-cache git jq
+RUN apk upgrade --no-cache && apk add --no-cache git jq openssh-client
+
+# ssh-keyscan is required by skills-init.sh when an Agent uses SSH-based git
+# auth (gitAuthSecretRef -> kubernetes.io/ssh-auth). Verify it is on PATH so a
+# future package change cannot silently reintroduce the missing-binary regression.
+RUN command -v ssh-keyscan >/dev/null
+
 COPY --from=krane-builder /build/krane /usr/local/bin/krane
 
 # Run as the same UID/GID as the main agent container (python user) so that