CtrlK
BlogDocsLog inGet started
Tessl Logo

pantheon-ai/dockerfile-validator

Comprehensive toolkit for validating, linting, and securing Dockerfiles. Use this skill when validating Dockerfile syntax, checking security best practices, optimizing image builds. Applies to all Dockerfile variants (Dockerfile, Dockerfile.prod, Dockerfile.dev, etc.).

Overall
score

93%

Does it follow best practices?

Validation for skill structure

Overview
Skills
Evals
Files

Discovery

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is an excellent skill description that hits all the marks. It provides comprehensive specific actions, includes natural trigger terms users would actually use, explicitly states both what it does and when to use it, and carves out a distinct niche around Dockerfile validation and security that won't conflict with other skills.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: 'syntax checking, detecting security vulnerabilities, validating layer ordering, checking for hardcoded secrets, verifying base image tags, and analyzing build optimization.'

3 / 3

Completeness

Clearly answers both what (validates, lints, secures Dockerfiles with specific actions) AND when with explicit 'Use when...' clause covering validation, security checks, optimization, auditing, and debugging scenarios.

3 / 3

Trigger Term Quality

Excellent coverage of natural terms users would say: 'Dockerfile', 'syntax', 'security', 'lints', 'container security', 'image builds', 'Dockerfile.prod', 'Dockerfile.dev', and common variants.

3 / 3

Distinctiveness Conflict Risk

Very clear niche focused specifically on Dockerfiles with distinct triggers like 'Dockerfile', 'container security', 'base image tags', and 'layer ordering' that are unlikely to conflict with general code linting or security skills.

3 / 3

Total

12

/

12

Passed

Implementation

85%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a well-structured, highly actionable skill with excellent workflow clarity and progressive disclosure. The main weakness is verbosity - some sections repeat information (validation stages described in overview, then again in detail) and explanations could be more concise. The mandatory workflow section and comprehensive troubleshooting table are particular strengths.

Suggestions

Consolidate the validation stage descriptions - remove the numbered list in 'Validation Workflow' section since each stage is detailed below, or remove the detailed sections and keep only the overview

Trim the 'Core Capabilities' section headers and introductory text - the code examples speak for themselves without needing 'Workflow:' labels and setup explanations

DimensionReasoningScore

Conciseness

The skill is comprehensive but includes some redundant explanations (e.g., explaining what each validation stage does multiple times) and could be tightened. The tables and examples are useful but the overall length (~400 lines) could be reduced while preserving clarity.

2 / 3

Actionability

Provides fully executable commands throughout, including the main validation script, manual tool commands, and specific code examples for good/bad patterns. The Dockerfile examples are copy-paste ready and the troubleshooting table gives concrete solutions.

3 / 3

Workflow Clarity

Excellent workflow structure with clear 4-stage validation sequence, explicit pre/post-validation steps, and a mandatory workflow section with numbered steps. Includes validation checkpoints (auto-cleanup via trap, severity-based summarization) and error recovery guidance.

3 / 3

Progressive Disclosure

Well-organized with clear overview, quick start, then detailed sections. References external files appropriately (scripts/, assets/, references/) with clear tables explaining each file's purpose. Navigation is straightforward with one-level-deep references.

3 / 3

Total

11

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Install with Tessl CLI

npx tessl i pantheon-ai/dockerfile-validator

Reviewed

Table of Contents