CtrlK
BlogDocsLog inGet started
Tessl Logo

pantheon-ai/dockerfile-validator

Comprehensive toolkit for validating, linting, and securing Dockerfiles. Use this skill when validating Dockerfile syntax, checking security best practices, optimizing image builds. Applies to all Dockerfile variants (Dockerfile, Dockerfile.prod, Dockerfile.dev, etc.).

Overall
score

93%

Does it follow best practices?

Validation for skill structure

Overview
Skills
Evals
Files

Discovery

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is an excellent skill description that hits all the marks. It provides comprehensive specific actions, includes natural trigger terms users would actually use, explicitly states both what it does and when to use it, and carves out a distinct niche around Dockerfile validation and security that won't conflict with other skills.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: 'syntax checking, detecting security vulnerabilities, validating layer ordering, checking for hardcoded secrets, verifying base image tags, and analyzing build optimization.'

3 / 3

Completeness

Clearly answers both what (validates, lints, secures Dockerfiles with specific actions) AND when with explicit 'Use when...' clause covering validation, security checks, optimization, auditing, and debugging scenarios.

3 / 3

Trigger Term Quality

Excellent coverage of natural terms users would say: 'Dockerfile', 'syntax', 'security', 'lints', 'container security', 'image builds', 'Dockerfile.prod', 'Dockerfile.dev', and common variants.

3 / 3

Distinctiveness Conflict Risk

Very clear niche focused specifically on Dockerfiles with distinct triggers like 'Dockerfile', 'container security', 'base image tags', and 'layer ordering' that are unlikely to conflict with general code linting or security skills.

3 / 3

Total

12

/

12

Passed

Implementation

85%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a well-structured, highly actionable skill with excellent workflow clarity and progressive disclosure. The main weakness is moderate verbosity - some explanations of tool capabilities and repeated mentions of features could be trimmed. The mandatory workflow section and clear reference file organization are particular strengths.

Suggestions

Remove explanatory text about what hadolint and Checkov do (e.g., '100+ built-in linting rules', '50+ security policies') - Claude knows these tools

Consolidate the cleanup mechanism explanation - it's mentioned in Quick Start, Validation Workflow step 6, and implied elsewhere

DimensionReasoningScore

Conciseness

The skill is reasonably efficient but includes some unnecessary verbosity, such as explaining what hadolint and Checkov do when Claude already knows these tools. The emoji checkmarks and some repetitive explanations (e.g., cleanup mentioned multiple times) add token overhead.

2 / 3

Actionability

Provides fully executable commands throughout, including the main validation script, individual tool commands, grep patterns for custom checks, and complete Dockerfile examples showing good vs bad patterns. All code is copy-paste ready.

3 / 3

Workflow Clarity

Excellent workflow structure with clear 4-stage validation sequence, explicit pre/post-validation steps, severity-based triage, and a mandatory workflow section with numbered steps. Includes validation checkpoints and error recovery guidance in the troubleshooting table.

3 / 3

Progressive Disclosure

Well-organized with clear sections progressing from quick start to detailed capabilities. References to external files (references/, scripts/, assets/) are clearly signaled with tables explaining each file's purpose. Content is appropriately split between overview and detailed reference materials.

3 / 3

Total

11

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Install with Tessl CLI

npx tessl i pantheon-ai/dockerfile-validator@0.1.0

Reviewed

Table of Contents