Comprehensive toolkit for validating, linting, and securing Dockerfiles. Use this skill when validating Dockerfile syntax, checking security best practices, optimizing image builds. Applies to all Dockerfile variants (Dockerfile, Dockerfile.prod, Dockerfile.dev, etc.).
Overall
score
93%
Does it follow best practices?
Validation for skill structure
Discovery
100%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This is an excellent skill description that hits all the marks. It provides comprehensive specific actions, includes natural trigger terms users would actually use, explicitly states both what it does and when to use it, and carves out a distinct niche around Dockerfile validation and security that won't conflict with other skills.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | Lists multiple specific concrete actions: 'syntax checking, detecting security vulnerabilities, validating layer ordering, checking for hardcoded secrets, verifying base image tags, and analyzing build optimization.' | 3 / 3 |
Completeness | Clearly answers both what (validates, lints, secures Dockerfiles with specific actions) AND when with explicit 'Use when...' clause covering validation, security checks, optimization, auditing, and debugging scenarios. | 3 / 3 |
Trigger Term Quality | Excellent coverage of natural terms users would say: 'Dockerfile', 'syntax', 'security', 'lints', 'container security', 'image builds', 'Dockerfile.prod', 'Dockerfile.dev', and common variants. | 3 / 3 |
Distinctiveness Conflict Risk | Very clear niche focused specifically on Dockerfiles with distinct triggers like 'Dockerfile', 'container security', 'base image tags', and 'layer ordering' that are unlikely to conflict with general code linting or security skills. | 3 / 3 |
Total | 12 / 12 Passed |
Implementation
85%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This is a well-structured, highly actionable skill with excellent workflow clarity and progressive disclosure. The main weakness is moderate verbosity - some explanations of tool capabilities and repeated mentions of features could be trimmed. The mandatory workflow section and clear reference file organization are particular strengths.
Suggestions
Remove explanatory text about what hadolint and Checkov do (e.g., '100+ built-in linting rules', '50+ security policies') - Claude knows these tools
Consolidate the cleanup mechanism explanation - it's mentioned in Quick Start, Validation Workflow step 6, and implied elsewhere
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The skill is reasonably efficient but includes some unnecessary verbosity, such as explaining what hadolint and Checkov do when Claude already knows these tools. The emoji checkmarks and some repetitive explanations (e.g., cleanup mentioned multiple times) add token overhead. | 2 / 3 |
Actionability | Provides fully executable commands throughout, including the main validation script, individual tool commands, grep patterns for custom checks, and complete Dockerfile examples showing good vs bad patterns. All code is copy-paste ready. | 3 / 3 |
Workflow Clarity | Excellent workflow structure with clear 4-stage validation sequence, explicit pre/post-validation steps, severity-based triage, and a mandatory workflow section with numbered steps. Includes validation checkpoints and error recovery guidance in the troubleshooting table. | 3 / 3 |
Progressive Disclosure | Well-organized with clear sections progressing from quick start to detailed capabilities. References to external files (references/, scripts/, assets/) are clearly signaled with tables explaining each file's purpose. Content is appropriately split between overview and detailed reference materials. | 3 / 3 |
Total | 11 / 12 Passed |
Validation
100%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 11 / 11 Passed
Validation for skill structure
No warnings or errors.
Install with Tessl CLI
npx tessl i pantheon-ai/dockerfile-validator@0.1.0Reviewed
Table of Contents